topic Re: How to graph total number of UDP sessions over time in General Topics

How to graph total number of UDP sessions over time

JBullockUCA — Wed, 08 Sep 2021 16:26:35 GMT

We're looking at setting up Zone/DoS protection and we would like to have a graph in order to establish a baseline. I've seen the ones within Pano health but those seem to be total numbers. We'd like to be able to see UDP separately. Is there something we can setup in ACC, Reports, etc..?

Re: How to graph total number of UDP sessions over time

ShaiW — Thu, 09 Sep 2021 07:26:35 GMT

In the NGFW UI, I was able to get a UDP session count for every 15 minute time frame. See below picture:

I set up a Custom Report with these parameters below. Just make sure to add the Filter "(proto eq 17)" to catch only UDP traffic from the detailed traffic logs.

Your other option is to increase the 'Max Rows in CSV Export' from the default 65535 (if needed, Device->Setup->Management->Logging and Reporting Settings) then view the traffic logs, filter by protocol 17, export to CSV and graph it in Excel.

Hope this helps,

Shai

Re: How to graph total number of UDP sessions over time

JBullockUCA — Fri, 10 Sep 2021 15:31:00 GMT

Awesome, I'll try it out, thanks!

About how long do these take to run? I've got it running and it's been showing "please wait..." for several minutes now.