Interface Statistics?

[mike_cc]

Is it only possible to view interface statistics if QoS is enabled on the interface?

Mike

[pulukas]

On the cli you can see the statistics on any port with or without cos enabled.

pan>show interface ethernet1/1

--------------------------------------------------------------------------------

Name: ethernet1/1, ID: 16

Link status:

  Runtime link speed/duplex/state: 1000/full/up

  Configured link speed/duplex/state: 1000/full/up

MAC address:

  Port MAC address 00:1b:17:01:35:10

Operation mode: layer3

Untagged sub-interface support: no

--------------------------------------------------------------------------------

Name: ethernet1/1, ID: 16

Operation mode: layer3

Virtual router PCI-PL-vr

Interface MTU 1500

Interface IP address: 10.24.32.7/23

Interface management profile: Allow_ping

  ping: yes  telnet: no ssh: no  http: no  https: no

  snmp: no  response-pages: no  userid-service: no

Service configured:

Zone: PCI-PL-Outside, virtual system: vsys1

Adjust TCP MSS: no

--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

Physical port counters read from MAC:

--------------------------------------------------------------------------------

rx-broadcast                  130264

rx-bytes                      1352921351

rx-multicast                  600048

rx-unicast                    1544405

tx-broadcast                  14696

tx-bytes                      1816576

tx-multicast 0

tx-unicast                    13688               

--------------------------------------------------------------------------------

Hardware interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           49992576

bytes transmitted                        1266684

packets received                         777517

packets transmitted                      28384

receive errors                           0

packets dropped                          0       

--------------------------------------------------------------------------------

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           49992576

bytes transmitted                        1266684

packets received                         777517

packets transmitted                      28384

receive errors                           0

packets dropped                          70438

packets dropped by flow state check      0

forwarding errors                        0

no route                                 42

arp not found                            0

neighbor not found                       0

neighbor info pending                    0

mac not found                            0

packets routed to different zone         0

land attacks                             0

ping-of-death attacks                    0

teardrop attacks                         0

ip spoof attacks                         0

mac spoof attacks                        0

ICMP fragment                            0

layer2 encapsulated packets              0

layer2 decapsulated packets              0

--------------------------------------------------------------------------------

[mike_cc]

Thanks for the info, but that's not really what I'm looking for. The statistics page on a QoS interface is what I'm not finding anywhere (except if QoS is enabled). It shows bandwidth, users, applications, etc. - things I'd expect to be able to see for an interface on this type of system. Although you can't arrange the columns which is strange.

[mbutt]

No Currently there is no way to build a QoS Report or statistics.

Look at the following posts

https://live.paloaltonetworks.com/message/31598#31598

https://live.paloaltonetworks.com/message/31127#31127

However if you are looking for data you can look at the ACC tab which shows you which application used how many session or bytes and many more details.

Also you can setup netflow profile on an interface as well.

Here is how to setup Netflow

Step1:

Configure Netflow Server Profile under

     Device--> Server profiles ---> Netflow

Step2:

Once the Server profile has been configured you Add that to the interface under

1. Network-----> Interface

Select the interface for which you want data to be sent to net flow server.

Step 3:

Commit your changes

Let us know if this helps you.

Thanks

Numan

[mikand]

Doesnt the chrome plugin found in devcenter display interface statistics?

[mike_cc]

That's helpful, but still not what I'm looking for. The system just doesn't have it built-in and I'm not sure why that is. This is what QoS Statistics looks like. Why isn't this available on all interfaces?

Mike

[mbutt]

Hi Mike,

That sounds like a great feature request. I would encourge you to get in touch with you Local Sales Engineer so he can request the feature on your Behalf.

Thanks

Numan

[shadowpeak]

For a live, continuously-updating view of all network interface throughput numbers (useful when trying to locate intermittent traffic spikes that are impacting firewall performance) run: 

show system state browser

Type Shift L and select Port Stats, type “y”, type “u”

To modify the screen refresh rate (default 5 seconds) hit “r”

This doesn't give historical statistics but can provide them in real time.

[VinceM]

Hi all,

Have you try to use the chrome plugin ?

You can find it here: https://live.paloaltonetworks.com/docs/DOC-4581

It's a great tool and can be modify if needed.

Hope help.

V.

[mike_cc]

The chrome plugin is okay, but not what I want. It would be great if you could click an interface and drill down into the details - applications, source users, etc., but again, this should be a built-in part of the system.

I'll talk to my sales rep. about it.

Mike

[VinceM]

Hi,

Correct, fell free to make changes and add-on .... and share it 🙂

V.