How do I monitor how much of the IPS cpu is being consumed?

Reply
L1 Bithead

How do I monitor how much of the IPS cpu is being consumed?

I have a PA-4060 and am monitoring via a TAP port my Internet connection and want to see how much traffic is being sent to the IPS engine hardware.  I need to know this because I know the IPS functionally is 1/2 of the rated throughput of the firewall functionallity.

I know about the following commands but I don't think this gives me what I want:

show system statistics                  - shows total bandwidth passing through the PAN
show running resource-monitor           - shows data plane CPU usgae at different time intervals
show system resources                   - shows management plane CPU usage


Accepted Solutions
Highlighted
L3 Networker

Re: How do I monitor how much of the IPS cpu is being consumed?

The closest thing to what you are looking is the cli command

'show running  resource-monitor' this will give the cpu utilization per core' , all dataplane traffic is load shared among the cores listed.

Look for the CPU load(%) status.

View solution in original post


All Replies
Highlighted
L3 Networker

Re: How do I monitor how much of the IPS cpu is being consumed?

The closest thing to what you are looking is the cli command

'show running  resource-monitor' this will give the cpu utilization per core' , all dataplane traffic is load shared among the cores listed.

Look for the CPU load(%) status.

View solution in original post

Highlighted
L1 Bithead

Re: How do I monitor how much of the IPS cpu is being consumed?

Can a command be added to the CLI, WebUI and SNMP so we have the ability to monitor/view it?  On a per vsys level would be the ideal solution.

Thanks,

Scott

Highlighted
L2 Linker

Re: How do I monitor how much of the IPS cpu is being consumed?

I run the command and it doesn't look like the load is shared amoungst all the cores  ( PANOS 4.0.3) :

CPU load (%) during last 13 weeks:
core    0       1       2       3  
     avg max avg max avg max avg max
       0   0   1  14   2  81   2  81
       0   0   1  25   2  70   2  70
       0   0   1  38   2 100   2 100
       0   0   1  51   2  78   2  78
       0   0   1  24   2  81   2  81
       0   0   1  23   2  83   2  85
       0   0   1  40   1  80   2  80
       0   0   1  23   2 100   2 100
       0   0   1  44   2  99   2  99
       0   0   1  24   2 100   2 100
       0   0   1  44   2  97   2  97
       0   0   0  10   0  11   0  11
       0   0   0   0   0   0   0   0

Could someone please clarify?  I'd not expect to see MAX of 100 percent if there is a virtually unused core (0, in this case).

thanks

Highlighted
L4 Transporter

Re: How do I monitor how much of the IPS cpu is being consumed?

Hi,

We assign different task to different processors. There are some processors reserved for dataplane and mgmt plane communication, some for flow control and handling, some for logging, while all remaining reserved for data processing. So some processors will be very busy while few of them may be more idle, depends on their job duties and loading.

Regards,

Jones

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!