topic Re: Daily packet capture limit of PA-3000? in General Topics

Daily packet capture limit of PA-3000?

smaekawa — Thu, 04 Jul 2013 08:27:33 GMT

I would like to know Daily packet capture limit of PA-3000 serial.

Do you know this?

other serial device is...

> 　PA-5000 : 786432

> 　PA-2000 : 131072

> 　PA-500　: 32768

> 　PA-200　: 65536

Regards.

Re: Daily packet capture limit of PA-3000?

Retired Member — Thu, 04 Jul 2013 11:00:48 GMT

This should give you the limit if I am not wrong

show system state | match dfilter

Also on 3020 it is 65536

Re: Daily packet capture limit of PA-3000?

Retired Member — Thu, 04 Jul 2013 11:10:36 GMT

Also pa200 and pa500 should be reverse I think

pa200 is 32768

Re: Daily packet capture limit of PA-3000?

smaekawa — Fri, 05 Jul 2013 01:45:02 GMT

Thank you for info.

This command result is Daily packet capture limit?

>>>>Also pa200 and pa500 should be reverse I think

>>>>

>>>>pa200 is 32768

Thank you for your comment.

This is Good answer!!

I checked PA-200 and PA-500, same result(32768).

But, I have questions more.

I confirm this command on the PA-2000 device.

Command result is following.

------------------

PA2020> show system state | match dfilte

cfg.general.ctd.max-dfilters: 65536

------------------

PA-2000 is not 131072?

this 65536 is answer?

""""general,high,"Daily packet capture limit (directory threat/20110408\, limit 131072)""""

This log is what devices log(limit 131072)?

And, PA-5000 is....

cfg.general.ctd.max-dfilters: ( 262144, 1048576, 1048576, )

running on PA-5060.

I think that any dpx parameter.

> 　PA-5000 : 786432?????

Regards,

Re: Daily packet capture limit of PA-3000?

Retired Member — Fri, 05 Jul 2013 06:12:03 GMT

on pa2020 and pa2050 that is different

I checked on Pa2050 it is

cfg.general.ctd.max-dfilters: 131072

I also checked on Pa5050

and as you said

cfg.general.ctd.max-dfilters: ( 262144, 1048576, )

that comes.I don't know why there are 2 here.Someone will tell us why there are more than 1 limit here for 5000 series.

I was not sure about the command just checked after your question because all limits can be shown in system state and it looks like that dfilter is what you look for.But it will be good if we can learn what is different with 5000 series.