topic Re: What is the 'Session metering: sessions throttled by management session threshold' on drop count? in General Topics

What is the 'Session metering: sessions throttled by management session threshold' on drop count?

KiCheon.Lee — Thu, 05 Sep 2013 04:10:30 GMT

Hello,

I am testing about VM-FW on ESXi environment.

But Traffic from VMs don't go through Internet.

There is VM-FW between VMs and Internet.

So I have checked PCAP and packet filtering.

I have seen all packet drop.

Drop count name is 'flow_meter_host_throttle '

This count description is 'Session metering: sessions throttled by management session threshold'

What is this count?

And How way does this problem resolve?

Thanks

Re: What is the 'Session metering: sessions throttled by management session threshold' on drop count?

harshanatarajan — Thu, 05 Sep 2013 04:26:35 GMT

'flow_meter_host_throttle ' - This means that the system is out of sessions and is dropping them due to the session table being full.

No new sessions would be created under such circumstances. You can check the output of -

>"show session meter" to verify the same.

Re: What is the 'Session metering: sessions throttled by management session threshold' on drop count?

KiCheon.Lee — Thu, 05 Sep 2013 04:43:10 GMT

Thanks, harshanatarajan.

'show session meter' cli command output as below

admin@PA-VM> show session meter

--------------------------------------------------------------------------------

VSYS Maximum Current Throttled

--------------------------------------------------------------------------------

1 200 0 0

--------------------------------------------------------------------------------

admin@PA-VM>

Re: What is the 'Session metering: sessions throttled by management session threshold' on drop count?

HULK — Thu, 05 Sep 2013 04:52:22 GMT

Hello Cheon,

This output means,

1. This firewall can support max 200 active concurrent session.

2. There are no active session at this point of time.

3. There is no session table overflow ( the system is out of sessions and is dropping them due to the session table being full )

You can apply below mentioned command to verify System Limits.

>show system state filter cfg.general.max*

How to Display System Limits

Thanks

Re: What is the 'Session metering: sessions throttled by management session threshold' on drop count?

harshanatarajan — Thu, 05 Sep 2013 05:28:32 GMT

Is the 'flow_meter_host_throttle ' counter continuously incrementing ?

Can you paste the output of show session info when the issue is happening.

Re: What is the 'Session metering: sessions throttled by management session threshold' on drop count?

kfindlen — Thu, 05 Sep 2013 05:56:15 GMT

The low session limit is caused by not having a VM series license installed. When the VM does not have a license installed a small amount of sessions are allowed for initial configuration and testing purposes. Once a valid VM series license is applied the appropriate session limits will be enforced based on the capacity of the license.

Verify on the Device tab -> Licenses that an auth code has been applied.

There was an issue in PAN-OS 5.0.0 where a VM series without a license applied would not allow any sessions to be created at all. This issue was fixed in a later maintenance release.