topic Re: Monitoring throughput in General Topics

Monitoring throughput

Retired Member — Sat, 28 Jul 2012 11:41:08 GMT

Hi @all,

in the cli I have an option to monitor the throughput via "show system statistics". Is there a way to monitor the firewallthroughput from external devices via snmp?

Robert

Re: Monitoring throughput

mikand — Sun, 29 Jul 2012 14:04:16 GMT

Yes, check out these templates made for Cacti:

Re: Monitoring throughput

rmonvon — Sun, 29 Jul 2012 14:04:37 GMT

Yes Robert. You can monitor CPU, session usage, etc via SNMP. Please check post: .

Thanks.

Re: Monitoring throughput

Retired Member — Sun, 29 Jul 2012 15:25:36 GMT

Hi,

thanks for your efforts. I know these MIB's. I think my question was a little bit imprecise. I will monitor the hole firewall throughput in Kbps / Mbps / Gbps like shown in "show system statistics". But today I found a post with the same problem and an unsatisfactory answer.

Robert

Re: Monitoring throughput

ksteves1 — Sun, 29 Jul 2012 17:18:58 GMT

The subtree is probably platform specific but on a pa-200 with 4.1 I can get the 'show system statistics session' data via sysd:

admin@PA-200> show system state filter sw.mprelay.s1.dp0.stats.session

sw.mprelay.s1.dp0.stats.session: { 'cps_installed': 0, 'session_active': 10, 'session_icmp': 0, 'sess

ion_installed': 282918, 'session_max': 65532, 'session_predict': 0, 'session_predict_dst': 0, 'sessio

n_predict_src': 0, 'session_tcp': 8, 'session_udp': 2, 'session_util': 0, 'sysup_seconds': 963222, 't

hroughput_kbps': 0, 'throughput_pps': 0, }

You can use panxapi or pancli from PAN-perl to get this remotely:

$ panxapi -t pa-200 -Xxro 'show system state filter "sw.mprelay.s1.dp0.stats.session"'

$ pancli -t pa-200 'show system state filter sw.mprelay.s1.dp0.stats.session'