Data plane utilization

[mgeorge]

Hi,

PA 2050 pan OS 5.0.7, data plane utilization show 94- 98 % during day time, is this creates a bottleneck in our network?

Thanks

[HULK]

Hello Mgeorge,

Could you please apply below mentioned command after every 10 minutes and share the o/p with us.

> debug data-plane pool statistics

> show system statistics session

> show running resource-monitor

> show session info

> show counter global filter delta yes  ( repeat the same command 5 times)

Thanks

[shasnain]

Hi,

In the ACC tab can you see what kind of traffic is causing the CPU to spike up and find the source address where the traffic is coming from too.

Thanks,

Syed R Hasnain

[Phoenix]

Hello Mgeorge,

One good way to look at why DP (Dataplane) is peeking high is to look at number of active sessions on the device.

show session info

Number of sessions supported:                    65532

Number of active sessions:                       2932

If the value if active sessions is same as sessions supported that explains that the device is getting traffic to the capacity of the device.

Also with the command "show running resource-monitor" we can see if there is any surge in packet descriptors with high numbers. It would also indicate how the DP is being utilized.

Was there a similar hike in DP utilization before going to 5.0.7, I am trying to isolate if there is some thing pertaining to the OS version.

Thanks

[mbutt]

Please run the following commands and show the entire output. The sample output would seem something like below and more.

admin@500> debug dataplane pool statistics

Verify Software pools are not depleted:

Software Pools

[ 0] software packet buffer 0  : 16384/16384    0x8000000021800680

[ 1] software packet buffer 1  : 8192/8192     0x8000000022010700

[ 2] software packet buffer 2  : 8192/8192     0x8000000022818780

[ 3] software packet buffer 3  : 4096/4096     0x8000000023820800

When the issue is happening If by any chance the number is reaching to 1 that would indicate that some buffer is leaking. If this is the case you will need to open a case with Tech support to further investigate the issue.

Hope this helps.

Thanks

Numan

[dieter_b]

shasnain, how would you do that ? Can you see cpu processing per application ?

[panos]

From ACC I think you can only compare time frames and this will give you some real stats and values to solve your cpu problem.

[shasnain]

Hi,

In the ACC you can actually select a time frame during the day when there was a CPU spike.

Click on the Application and it will show you the source address and other details too.

Thanks,

Syed R Hasnain

[dieter_b]

I see.

But ACC itself can not be used to identify the time or origin of high cpu usage.

[mbutt]

Did you get a chance to run the following command and see the output

admin@500> debug dataplane pool statistics

Thanks

Numan

[shasnain]

Hi dieterb,

If you have the time frame as when the CPU is spiking through the day you can actually use the ACC to see why it s doing so as what kind of traffic is causing CPU to spike up.

Thanks,

Syed R Hasnain