11-18-2011 03:22 AM
Hello,
Is there a way to record system resources (mgmt CPU, datapalce CPU and sessions count) ?
Indeed, we have to perform load test on the devices and it would be quite boring to refresh the dashboard page repeatedly during the test... Also is there a way to set a snapshot that records these resources values with a customizable refresh ?
Regards,
Laurent
11-18-2011 03:36 AM
Is monitoring with SNMP an Option for you?
We use Cacti and this MIB for monitoring:
.1.3.6.1.2.1.25.3.3.1.2
try:
snmpwalk -v2c -c <YOURCOMMUNITY> <MGMT-IP> .1.3.6.1.2.1.25.3.3.1.2
Maybe Session Count is also available via SNMP
i did not take a look in the Paloalto MIB yet.
Regards
Marco
09-12-2012 03:00 PM
Hi Laurent,
Here is the link to document that will have SNMP OIDs to monitor the firewall:-
The document below has the OIDS for monitoring CPU on the management plane ,data plane, interfaces and session utilization.
https://live.paloaltonetworks.com/docs/DOC-1744
Let me know if that helps
Regards
Parth
09-12-2012 03:40 PM
Hi Laurent,
The other way you can monitor different process and its utilization on the management plane is through CLI and you can continuously follow it.
The command is "Show system resources follow"
The above command is similar to top command in linux.
output for system resource is as follows:
admin> show system resources
top - 15:20:32 up 11 days, 14:03, 1 user, load average: 1.01, 1.22, 1.29
Tasks: 97 total, 2 running, 95 sleeping, 0 stopped, 0 zombie
Cpu(s): 50.6%us, 0.8%sy, 1.7%ni, 46.8%id, 0.1%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 2575900k total, 2272140k used, 303760k free, 56656k buffers
Swap: 7992k total, 472k used, 7520k free, 1515012k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
2377 20 0 47432 24m 3448 R 100 1.0 16679:05 pan_task
1973 20 0 4468 1020 800 R 2 0.0 0:00.02 top
1 20 0 1836 564 528 S 0 0.0 0:02.63 init
2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd
3 RT 0 0 0 0 S 0 0.0 0:00.00 migration/0
4 20 0 0 0 0 S 0 0.0 0:00.01 ksoftirqd/0
5 RT 0 0 0 0 S 0 0.0 0:00.00 migration/1
6 20 0 0 0 0 S 0 0.0 0:00.00 ksoftirqd/1
7 20 0 0 0 0 S 0 0.0 0:00.21 events/0
8 20 0 0 0 0 S 0 0.0 0:00.00 events/1
9 20 0 0 0 0 S 0 0.0 0:00.03 khelper
12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr
112 20 0 0 0 0 S 0 0.0 0:00.00 sync_supers
114 20 0 0 0 0 S 0 0.0 0:00.00 bdi-default
115 20 0 0 0 0 S 0 0.0 0:00.23 kblockd/0
116 20 0 0 0 0 S 0 0.0 0:00.01 kblockd/1
125 20 0 0 0 0 S 0 0.0 0:00.00 ata/0
126 20 0 0 0 0 S 0 0.0 0:00.00 ata/1
127 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux
132 20 0 0 0 0 S 0 0.0 0:00.00 khubd
135 20 0 0 0 0 S 0 0.0 0:00.00 kseriod
155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0
156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1
174 20 0 0 0 0 S 0 0.0 0:15.91 kswapd0
175 20 0 0 0 0 S 0 0.0 0:00.00 aio/0
176 20 0 0 0 0 S 0 0.0 0:00.00 aio/1
177 20 0 0 0 0 S 0 0.0 0:00.00 nfsiod
763 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0
765 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_1
771 20 0 0 0 0 S 0 0.0 0:00.62 mtdblockd
797 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer
836 20 0 0 0 0 S 0 0.0 0:11.84 flush-8:0
837 20 0 0 0 0 S 0 0.0 0:02.86 kjournald
892 16 -4 2008 448 400 S 0 0.0 0:00.71 udevd
1708 20 0 0 0 0 S 0 0.0 0:00.31 kjournald
1709 20 0 0 0 0 S 0 0.0 0:00.00 kjournald
1847 20 0 2008 676 592 S 0 0.0 0:01.00 syslogd
1850 20 0 1892 332 328 S 0 0.0 0:00.00 klogd
1858 rpc 20 0 2084 500 488 S 0 0.0 0:00.00 portmap
1863 20 0 21324 2456 2016 S 0 0.1 0:00.09 sshd
1876 20 0 2116 688 664 S 0 0.0 0:00.04 rpc.statd
1885 admin 20 0 21468 1524 1060 S 0 0.1 0:00.04 sshd
1886 admin 20 0 94808 21m 10m S 0 0.8 0:01.49 cli
1945 20 0 6852 996 716 S 0 0.0 0:00.38 sshd
1970 admin 20 0 2976 668 564 S 0 0.0 0:00.02 less
1972 20 0 3832 1188 1056 S 0 0.0 0:00.03 sh
1974 20 0 1940 536 464 S 0 0.0 0:00.00 sed
1988 20 0 6788 912 636 S 0 0.0 0:00.01 sshd
1997 20 0 3280 724 600 S 0 0.0 0:00.00 xinetd
2016 20 0 0 0 0 S 0 0.0 0:00.00 lockd
2017 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2018 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2019 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2020 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2021 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2022 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2023 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2024 20 0 0 0 0 S 0 0.0 0:00.00 nfsd
2027 20 0 2168 236 120 S 0 0.0 0:00.00 rpc.mountd
2069 0 -20 119m 10m 2132 S 0 0.4 17:59.69 masterd_core
2072 20 0 1888 524 452 S 0 0.0 0:00.00 agetty
2079 0 -20 26132 5020 1892 S 0 0.2 0:28.75 masterd_manager
2086 15 -5 38788 6816 2268 S 0 0.3 64:26.34 sysd
2088 0 -20 30856 9752 1904 S 0 0.4 10:31.88 masterd_manager
2092 20 0 87532 10m 4176 S 0 0.4 0:01.03 dagger
2093 30 10 37860 6316 2864 S 0 0.2 14:54.25 python
2094 20 0 74296 9.9m 3684 S 0 0.4 0:06.85 cryptod
2095 20 0 163m 6716 3124 S 0 0.3 0:12.85 sysdagent
2096 20 0 142m 2320 1280 S 0 0.1 0:06.21 brdagent
2097 20 0 30080 4732 1820 S 0 0.2 0:08.72 ehmon
2098 20 0 45560 5988 2796 S 0 0.2 0:01.41 chasd
2193 20 0 0 0 0 S 0 0.0 0:00.24 kjournald
2208 20 0 2900 1072 576 S 0 0.0 0:00.09 crond
2212 20 0 380m 183m 6312 S 0 7.3 10:32.73 mgmtsrvr
2238 20 0 377m 72m 12m S 0 2.9 6:25.78 devsrvr
2240 nobody 20 0 142m 28m 3748 S 0 1.2 0:14.89 appweb3
2242 nobody 20 0 194m 45m 7208 S 0 1.8 4:00.02 appweb3
2243 20 0 79540 7960 4116 S 0 0.3 0:00.83 ikemgr
2244 20 0 247m 65m 3944 S 0 2.6 0:20.15 logrcvr
2245 20 0 96252 7168 3640 S 0 0.3 0:00.69 rasmgr
2246 20 0 94864 6376 2976 S 0 0.2 0:00.43 keymgr
2247 20 0 198m 7324 3308 S 0 0.3 0:02.80 varrcvr
2248 17 -3 54744 6800 3324 S 0 0.3 0:01.96 ha_agent
2249 20 0 83832 6940 3216 S 0 0.3 0:00.46 sslmgr
2250 20 0 56612 8940 3708 S 0 0.3 0:40.43 dhcpd
2251 20 0 158m 57m 34m S 0 2.3 0:33.84 useridd
2252 20 0 72328 8700 3532 S 0 0.3 0:00.76 dnsproxyd
2253 20 0 71532 7996 3400 S 0 0.3 0:00.88 pppoed
2254 20 0 130m 14m 3940 S 0 0.6 0:03.93 routed
2255 20 0 126m 8108 4156 S 0 0.3 0:02.39 authd
2256 20 0 25364 3844 2084 S 0 0.1 0:00.55 snmpd
2261 nobody 20 0 113m 9784 3960 S 0 0.4 0:14.21 appweb3
2374 20 0 26844 4400 2628 S 0 0.2 0:00.76 mprelay
2375 20 0 111m 34m 3708 S 0 1.4 0:35.22 pan_comm
2376 20 0 27052 4548 2584 S 0 0.2 0:21.80 pan_dha
2379 30 10 38388 6860 2840 S 0 0.3 0:08.70 python
7212 20 0 3980 3848 2956 S 0 0.1 0:00.08 ntpd
For dataplane you can use the following command with different options to view the cpu usage
admin> show running resource-monitor
> day Per-day monitoring statistics
> hour Per-hour monitoring statistics
> minute Per-minute monitoring statistics
> second Per-second monitoring statistics
> week Per-week monitoring statistics
| Pipe through a command
<Enter> Finish input
For session you can use the following command and it shows you continuous output
admin> show system statistics session
output will be as follows
Device is up : 11 days 14 hours 6 mins 2 sec
Packet rate : 32/s
Throughput : 27 Kbps
Total active sessions : 87
Active TCP sessions : 35
Active UDP sessions : 52
Active ICMP sessions : 0
Hope this helps.
Thanks
mbutt
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
