Hello Abraun, When there is a scenario where the packet descriptors are High as in more than 80% for some time and staying there, it indicates lot of dataplane traffic is being processed. Now there are many ways to look into it, 1> See if there are any attacks or threats, this can be seen in Threat logs and its frequency. 2> Implement DOS protection or Zone protection as needed and see if there are any Syn attacks or so on. 3> Wonderful idea is to look for ACC tab and see what kind of applications were running at the time when descriptors were high. Find the time frame and select the time range in ACC and filter the results. Ideally now that should tell us which applications were seen which were consuming DP resources. Also from the Bytes consumed per APP we can know narrow down the most used app. > Look for the Dataplane counters available in dp-monitor.log at the time of issue. This will be the pointer towards any issues. They may not be very clear to understand but some of them are clear to point out the cause. If you compare the counters from some time ago when packet descriptors were good, we get good lot of stats as to which counters increased, giving us greater granularity of knowledge. Hope all this helps !
... View more