Interface Statistics?

Reply
Highlighted
Not applicable

Interface Statistics?

Is it only possible to view interface statistics if QoS is enabled on the interface?

Mike

Highlighted
L7 Applicator

On the cli you can see the statistics on any port with or without cos enabled.

pan>show interface ethernet1/1

--------------------------------------------------------------------------------

Name: ethernet1/1, ID: 16

Link status:

  Runtime link speed/duplex/state: 1000/full/up

  Configured link speed/duplex/state: 1000/full/up

MAC address:

  Port MAC address 00:1b:17:01:35:10

Operation mode: layer3

Untagged sub-interface support: no

--------------------------------------------------------------------------------

Name: ethernet1/1, ID: 16

Operation mode: layer3

Virtual router PCI-PL-vr

Interface MTU 1500

Interface IP address: 10.24.32.7/23

Interface management profile: Allow_ping

  ping: yes  telnet: no ssh: no  http: no  https: no

  snmp: no  response-pages: no  userid-service: no

Service configured:

Zone: PCI-PL-Outside, virtual system: vsys1

Adjust TCP MSS: no

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

Physical port counters read from MAC:

--------------------------------------------------------------------------------

rx-broadcast                  130264

rx-bytes                      1352921351

rx-multicast                  600048

rx-unicast                    1544405

tx-broadcast                  14696

tx-bytes                      1816576

tx-multicast 0

tx-unicast                    13688               

--------------------------------------------------------------------------------

Hardware interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           49992576

bytes transmitted                        1266684

packets received                         777517

packets transmitted                      28384

receive errors                           0

packets dropped                          0       

--------------------------------------------------------------------------------

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           49992576

bytes transmitted                        1266684

packets received                         777517

packets transmitted                      28384

receive errors                           0

packets dropped                          70438

packets dropped by flow state check      0

forwarding errors                        0

no route                                 42

arp not found                            0

neighbor not found                       0

neighbor info pending                    0

mac not found                            0

packets routed to different zone         0

land attacks                             0

ping-of-death attacks                    0

teardrop attacks                         0

ip spoof attacks                         0

mac spoof attacks                        0

ICMP fragment                            0

layer2 encapsulated packets              0

layer2 decapsulated packets              0

--------------------------------------------------------------------------------

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Highlighted
Not applicable

Thanks for the info, but that's not really what I'm looking for. The statistics page on a QoS interface is what I'm not finding anywhere (except if QoS is enabled). It shows bandwidth, users, applications, etc. - things I'd expect to be able to see for an interface on this type of system. Although you can't arrange the columns which is strange.

Highlighted
L5 Sessionator

No Currently there is no way to build a QoS Report or statistics.

Look at the following posts

https://live.paloaltonetworks.com/message/31598#31598

https://live.paloaltonetworks.com/message/31127#31127

However if you are looking for data you can look at the ACC tab which shows you which application used how many session or bytes and many more details.

Capture.JPG.jpg

Also you can setup netflow profile on an interface as well.

Here is how to setup Netflow

Step1:

Configure Netflow Server Profile under

     Device--> Server profiles ---> Netflow

1.jpg

Step2:

Once the Server profile has been configured you Add that to the interface under

  1. Network-----> Interface

Select the interface for which you want data to be sent to net flow server.

2.jpg

Step 3:

Commit your changes

Let us know if this helps you.

Thanks

Numan

Highlighted
L6 Presenter

Doesnt the chrome plugin found in devcenter display interface statistics?

Highlighted
Not applicable

That's helpful, but still not what I'm looking for. The system just doesn't have it built-in and I'm not sure why that is. This is what QoS Statistics looks like. Why isn't this available on all interfaces?

Mike

Highlighted
L5 Sessionator

Hi Mike,

That sounds like a great feature request. I would encourge you to get in touch with you Local Sales Engineer so he can request the feature on your Behalf.

Thanks

Numan

Highlighted
L0 Member

For a live, continuously-updating view of all network interface throughput numbers (useful when trying to locate intermittent traffic spikes that are impacting firewall performance) run: 


show system state browser

Type Shift L and select Port Stats, type “y”, type “u

To modify the screen refresh rate (default 5 seconds) hit “r

This doesn't give historical statistics but can provide them in real time.

L5 Sessionator

Hi all,

Have you try to use the chrome plugin ?

You can find it here: https://live.paloaltonetworks.com/docs/DOC-4581

It's a great tool and can be modify if needed.

Hope help.

V.

Highlighted
Not applicable

The chrome plugin is okay, but not what I want. It would be great if you could click an interface and drill down into the details - applications, source users, etc., but again, this should be a built-in part of the system.

I'll talk to my sales rep. about it.

Mike

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!