How to graph total number of UDP sessions over time

[JBullockUCA]

We're looking at setting up Zone/DoS protection and we would like to have a graph in order to establish a baseline. I've seen the ones within Pano health but those seem to be total numbers. We'd like to be able to see UDP separately. Is there something we can setup in ACC, Reports, etc..?

[ShaiW · Accepted solution]

Hi

In the NGFW UI, I was able to get a UDP session count for every 15 minute time frame. See below picture:

I set up a Custom Report with these parameters below. Just make sure to add the Filter "(proto eq 17)" to catch only UDP traffic from the detailed traffic logs.

Your other option is to increase the 'Max Rows in CSV Export' from the default 65535 (if needed, Device->Setup->Management->Logging and Reporting Settings) then view the traffic logs, filter by protocol 17, export to CSV and graph it in Excel.

Hope this helps,

Shai

[JBullockUCA]

Awesome, I'll try it out, thanks! 

About how long do these take to run? I've got it running and it's been showing "please wait..." for several minutes now.