https://live.paloaltonetworks.com/t5/general-topics/connections-per-second-per-host/m-p/304249#M79124 <P>How about setting up a filter in the Packet Filter portion of the FW (not referring to the capture stages.... to be clear).</P><P>&nbsp;</P><P>then you can do something like</P><P>&nbsp;</P><P><STRONG>expedition@PA-220&gt; show counter global filter packet-filter yes</STRONG><BR />+ aspect Counter aspect<BR />+ category Counter category<BR />+ delta Difference from last read<BR />+ severity Counter severity<BR />+ value value<BR />| Pipe through a command<BR /><BR /></P><P>And you can see whatever granular info you would like, because your filter is for the IP of the device in question... you can get cps then, (or similar)&nbsp;</P><P>&nbsp;</P> Wed, 18 Dec 2019 15:52:29 GMT S.Cantwell 2019-12-18T15:52:29Z https://live.paloaltonetworks.com/t5/general-topics/connections-per-second-per-host/m-p/304244#M79123 <P>Has anyone found a way to see a hosts generated connections per second? In other words we want to hone in on a specific host and see the CPS being generated in either a live or post event.</P><P>&nbsp;</P><P>All I have found so far is global cps (show session info)</P><P>&nbsp;</P><P>Thank you</P> Wed, 18 Dec 2019 15:14:07 GMT https://live.paloaltonetworks.com/t5/general-topics/connections-per-second-per-host/m-p/304244#M79123 Gun-Slinger 2019-12-18T15:14:07Z https://live.paloaltonetworks.com/t5/general-topics/connections-per-second-per-host/m-p/304249#M79124 <P>How about setting up a filter in the Packet Filter portion of the FW (not referring to the capture stages.... to be clear).</P><P>&nbsp;</P><P>then you can do something like</P><P>&nbsp;</P><P><STRONG>expedition@PA-220&gt; show counter global filter packet-filter yes</STRONG><BR />+ aspect Counter aspect<BR />+ category Counter category<BR />+ delta Difference from last read<BR />+ severity Counter severity<BR />+ value value<BR />| Pipe through a command<BR /><BR /></P><P>And you can see whatever granular info you would like, because your filter is for the IP of the device in question... you can get cps then, (or similar)&nbsp;</P><P>&nbsp;</P> Wed, 18 Dec 2019 15:52:29 GMT https://live.paloaltonetworks.com/t5/general-topics/connections-per-second-per-host/m-p/304249#M79124 S.Cantwell 2019-12-18T15:52:29Z