Monitoring throughput

[robert.hoffmann]

Hi @all,

in the cli I have an option to monitor the throughput via "show system statistics". Is there a way to monitor the firewallthroughput from external devices via snmp?

Robert

[mikand]

Yes, check out these templates made for Cacti:

[rmonvon]

Yes Robert.  You can monitor CPU, session usage, etc via SNMP.  Please check post:  .

Thanks.

[robert.hoffmann]

Hi,

thanks for your efforts. I know these MIB's. I think my question was a little bit imprecise. I will monitor the hole firewall throughput in Kbps / Mbps / Gbps like shown in "show system statistics". But today I found a post with the same problem and an unsatisfactory answer.

Robert

[ksteves1]

The subtree is probably platform specific but on a pa-200 with 4.1 I can get the 'show system statistics session' data via sysd:

admin@PA-200> show system state filter sw.mprelay.s1.dp0.stats.session

sw.mprelay.s1.dp0.stats.session: { 'cps_installed': 0, 'session_active': 10, 'session_icmp': 0, 'sess

ion_installed': 282918, 'session_max': 65532, 'session_predict': 0, 'session_predict_dst': 0, 'sessio

n_predict_src': 0, 'session_tcp': 8, 'session_udp': 2, 'session_util': 0, 'sysup_seconds': 963222, 't

hroughput_kbps': 0, 'throughput_pps': 0, }

You can use panxapi or pancli from PAN-perl to get this remotely:

$ panxapi -t pa-200 -Xxro 'show system state filter "sw.mprelay.s1.dp0.stats.session"'

$ pancli -t pa-200 'show system state filter sw.mprelay.s1.dp0.stats.session'