Monitoring Individual Dataplane CPU's

Marcus-Stephens — Mon, 14 May 2018 16:35:22 GMT

We are currently experiencing issues in our network environment with dp0 (specifically) being overutilized on the Palo Alto 5050 and 5060's, mainly due to the fact that IPSEC traffic is not offloaded from dp0 to dp1 and/or dp2.

We can actively monitor (via CLI) the individual usage via the following:

show running resource-monitor ingress backlogs

show running resource-monitor [interval] last [time]

The first command is good from a session perspective, and it does break it down by indidvidual dataplanes, but that data does not match the individual core values from the second command. Maybe the "ingress-backlogs" is more a respresentation of core 0 for the dataplane in question? The second command appears to be the accurate representation of what all cores are experiencing over the last seconds, minutes, hours, etc. ... but I can't find a MIB that average dp0 specifically, let alone a command to clean that up to an average (as "ingress backlogs" does not appear to be that representation).

Both commands are useful once we've started experiencing overutilization, but we're trying to get things set up in SolarWinds via SNMP (MIB) to actually keep an eye on the individual dp0/dp1/dp2 usage so we can be ahead of it. Logging into the GUI does have a System Resources dashboard for CPU monitoring, but that is very clearly an average of all the dataplane CPU's and not helpful in this kind of scenario (where only dp0 is an issue).

Does anyone know of a specific MIB that isn't average dp0/dp1/dp2 together? And if not a MIB, a true CLI command that is the right kind of presentation of the data?

Re: Monitoring Individual Dataplane CPU's

BPry — Mon, 14 May 2018 21:35:42 GMT

@Marcus-Stephens,

I believe that Pan(w)achrome can give you the statistics that you are looking for if you were to utilize that chrome extension. That would at least present the information that you are looking for.

topic Monitoring Individual Dataplane CPU's in General Topics

Monitoring Individual Dataplane CPU's

Re: Monitoring Individual Dataplane CPU's