PA 2050 pan OS 5.0.7, data plane utilization show 94- 98 % during day time, is this creates a bottleneck in our network?
Could you please apply below mentioned command after every 10 minutes and share the o/p with us.
> debug data-plane pool statistics
> show system statistics session
> show running resource-monitor
> show session info
> show counter global filter delta yes ( repeat the same command 5 times)
In the ACC tab can you see what kind of traffic is causing the CPU to spike up and find the source address where the traffic is coming from too.
Syed R Hasnain
One good way to look at why DP (Dataplane) is peeking high is to look at number of active sessions on the device.
show session info
Number of sessions supported: 65532
Number of active sessions: 2932
If the value if active sessions is same as sessions supported that explains that the device is getting traffic to the capacity of the device.
Also with the command "show running resource-monitor" we can see if there is any surge in packet descriptors with high numbers. It would also indicate how the DP is being utilized.
Was there a similar hike in DP utilization before going to 5.0.7, I am trying to isolate if there is some thing pertaining to the OS version.
Please run the following commands and show the entire output. The sample output would seem something like below and more.
admin@500> debug dataplane pool statistics
Verify Software pools are not depleted:
[ 0] software packet buffer 0 : 16384/16384 0x8000000021800680
[ 1] software packet buffer 1 : 8192/8192 0x8000000022010700
[ 2] software packet buffer 2 : 8192/8192 0x8000000022818780
[ 3] software packet buffer 3 : 4096/4096 0x8000000023820800
When the issue is happening If by any chance the number is reaching to 1 that would indicate that some buffer is leaking. If this is the case you will need to open a case with Tech support to further investigate the issue.
Hope this helps.
In the ACC you can actually select a time frame during the day when there was a CPU spike.
Click on the Application and it will show you the source address and other details too.
Syed R Hasnain
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!