Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About diennea
About diennea
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
10-29-2019
38Posts
2Likes
1Solution
Oct 29, 2019Last Visited
User
Activity
User
Profile
Latest posts by diennea
| Subject | Views | Posted |
|---|---|---|
| 2085 | 10-29-2019 01:54 AM | |
| 3566 | 03-08-2016 05:00 AM | |
| 3573 | 03-08-2016 03:56 AM | |
| 3586 | 03-07-2016 08:43 AM | |
| 534 | 09-15-2015 12:10 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 09-24-2014 12:06 AM | |
| 1 | 09-24-2014 12:04 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 06-29-2012 04:51 AM |
| Date Last Visited | 10-29-2019 05:16 AM |
| Total Messages Posted | 39 |
| Total Likes Received | 2 |
03-08-2016
03:56 AM
Hi,
I don't think so.
I read this document
https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Save-an-Entire-Configuration-for-Import-into-Another-Palo/ta-p/61476
here I read
"Importing an entire configuration into another Palo Alto Networks device may result of a device failure, replacement, or migration. The device configuration and security policy can be successfully exported and imported between devices as long as the following criteria are met:
Identical hardware model (PA-500 to PA-500, PA-5020 to PA-5020, and so on.)
Importing configurations between non-matching hardware versions is not currently supported.
Identical major PAN-OS version (4.1.x to 4.1.x, 5.0.x to 5.0.x and 6.0.x)
To import the configuration, upgrade the device to the same PAN-OS version prior to import."
... View more
03-07-2016
08:43 AM
Hi,
I need to migrate from 2 PA-500 firewall in HA to 2 PA-3020 firewall in HA.
Should I use Migration Tool or there is a more simple way?
In caso I should use Migration Tool where can I find some sample about migration from PA to PA ?
Thanks
Regards
... View more
09-15-2015
12:10 AM
Hi, I’ve some problem upgrading GlobalProtect Now I’ve 2.1.1 version Activating a new version (I try with 2.2.2 and also with 2.3.1) automatic upgrade fail and I need to manually remove GlobalProtect and install new version again. I also tried to install 2.2.2 and then trying an automatic upgrade to 2.3.1 but it still fails This is the log (T688) 09/10/15 19:40:35:867 Debug(1370): Logged out gateway gp.mydomain.tld (T688) 09/10/15 19:40:35:867 Debug(3118): Set state to Disconnected (T688) 09/10/15 19:40:35:867 Error( 732): Failed to send 912 bytes to client (T688) 09/10/15 19:40:36:086 Debug( 152): driver started 0 (T688) 09/10/15 19:40:36:086 Debug(2029): psv stop called (T688) 09/10/15 19:40:36:086 Debug(3034): StopThreads(): (T688) 09/10/15 19:40:36:086 Debug( 678): Logging out gateway, reason is StopThreads (T688) 09/10/15 19:40:36:086 Debug( 708): Logging out gateway over (T5232) 09/10/15 19:40:36:086 Debug(2525): HipReportThread: got exit event. (T5232) 09/10/15 19:40:36:086 Debug(2705): HipReportThread: HipReportThread quits (pos 2). (T5228) 09/10/15 19:40:36:086 Debug(2213): NetworkDiscoverThread: got exit event. (T5228) 09/10/15 19:40:36:086 Debug(2438): NetworkDiscoverThread: quits. (T688) 09/10/15 19:40:36:195 Debug(3049): threads are gracefully stopped. (T5240) 09/10/15 19:40:36:195 Debug( 226): HipCheckThread: got thread exist event. (T5240) 09/10/15 19:40:36:195 Debug( 281): HipCheckThread: Hip check thread quits. (T5244) 09/10/15 19:40:36:195 Debug( 482): HipMissingPatchThread: Hip check missiing patch thread quits. (T1008) 09/10/15 19:40:36:928 Debug( 534): WscCallback (T1008) 09/10/15 19:40:36:928 Debug( 536): SetWscEvent (T1008) 09/10/15 19:40:37:942 Debug( 534): WscCallback (T1008) 09/10/15 19:40:37:942 Debug( 536): SetWscEvent (T5248) 09/10/15 19:40:38:831 Debug( 412): before check wsc (T5248) 09/10/15 19:40:38:831 Debug( 365): WscAutoDetect is enabled. Value: -1 (T5248) 09/10/15 19:40:38:831 Debug( 415): CheckWsc (T5248) 09/10/15 19:40:38:831 Debug( 441): CheckWsc is called. (T5248) 09/10/15 19:40:38:831 Debug( 455): WscCallback: health state change not detected. Ignore this one. (T5248) 09/10/15 19:40:38:831 Debug( 401): before WaitForMultipleObjects (T5248) 09/10/15 19:40:38:831 Debug( 404): HipMonitor gets quit event. (T5248) 09/10/15 19:40:38:831 Debug( 421): Unregister -- WscUnRegisterChanges (T5248) 09/10/15 19:40:38:847 Debug( 660): HipMonitorThread quits. (T688) 09/10/15 19:40:38:847 Info ( 135): All hip collect threads quit gracefully. (T688) 09/10/15 19:40:38:847 Info (2036): Wait until all threads exit (T688) 09/10/15 19:40:38:847 Debug(2052): wait for threads:lifeTime(FFFFFFFF), NetworkDiscover(00000000), m_hHipReport(00000000), NetworkMonitor(00000000) (T688) 09/10/15 19:40:38:847 Info (2055): All threads exit (T688) 09/10/15 19:40:38:847 Info ( 55): Client pid 3972 is terminated. 10/09/2015 19:45:09,20 - PanGPS service cannot be stopped. time out 300. I check services and PanGPS was stopped (when client closed also PanGPS was stopped) I try from different PCs and from MAC No problem with MAC (unbelivable….) With windows 7 , 8 and 8.1 same problems I also tried from company PCs (with McAfee Antivirus) and from home PC (without any AV) Same problem Thanks regards
... View more
10-03-2014
04:53 AM
I suggest you to buy RAM upgrade. It solves my problems Now GUI is pretty fast and commit operation take less than 3 minutes
... View more
09-24-2014
12:06 AM
1 Kudo
Regarding my situation: I upgrade RAM from 1 to 2 GB I cannot believe my eyes: now GUI usage is fast and commit take less than 2 minutes
... View more
09-24-2014
12:04 AM
1 Kudo
After RAM upgrade GUI goes very well. GUI usage is fast and commit take less than 2 minutes
... View more
09-15-2014
11:09 PM
Now is good but after a reboot it is always good. I need to wait some hours (better one day) to monitor the GUI
... View more
09-15-2014
10:54 PM
Hi, few minutes ago I install 2GB of RAM on my PA500 Here the show system resources output: top - 07:41:40 up 23 min, 1 user, load average: 2.93, 3.15, 2.74 Tasks: 104 total, 2 running, 102 sleeping, 0 stopped, 0 zombie Cpu(s): 27.9%us, 8.7%sy, 10.3%ni, 14.0%id, 38.0%wa, 0.2%hi, 0.8%si, 0.0%st Mem: 1970840k total, 1687588k used, 283252k free, 37320k buffers Swap: 2008084k total, 0k used, 2008084k free, 729900k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 8197 30 10 4016 1404 1104 R 37 0.1 1:26.54 genindex.sh 2716 20 0 511m 304m 14m S 15 15.8 9:49.35 mgmtsrvr 22042 admin 20 0 2972 672 568 S 5 0.0 0:00.05 less 22048 20 0 4464 1016 784 R 4 0.1 0:00.05 top 22059 20 0 12124 1664 1508 S 4 0.1 0:00.02 wmic 2258 0 -20 83912 19m 6208 S 2 1.0 0:18.71 masterd_apps 2698 20 0 181m 86m 69m S 2 4.5 0:10.27 useridd 2747 20 0 49884 5556 3164 S 2 0.3 0:03.17 snmpd 1 20 0 1832 616 536 S 0 0.0 0:01.45 init 2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:00.02 migration/0 4 20 0 0 0 0 S 0 0.0 0:00.06 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:00.02 migration/1 6 20 0 0 0 0 S 0 0.0 0:00.05 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 0:00.46 events/0 8 20 0 0 0 0 S 0 0.0 0:00.46 events/1 9 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 111 20 0 0 0 0 S 0 0.0 0:00.01 sync_supers 113 20 0 0 0 0 S 0 0.0 0:00.01 bdi-default 114 20 0 0 0 0 S 0 0.0 0:01.20 kblockd/0 115 20 0 0 0 0 S 0 0.0 0:01.07 kblockd/1 124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 131 20 0 0 0 0 S 0 0.0 0:00.00 khubd 134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 S 0 0.0 0:04.31 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod 765 20 0 0 0 0 S 0 0.0 0:00.29 octeon-ethernet 793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 798 20 0 0 0 0 S 0 0.0 0:00.43 mtdblockd 826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 866 20 0 0 0 0 S 0 0.0 0:00.25 kjournald 919 16 -4 1992 608 396 S 0 0.0 0:00.95 udevd 1886 20 0 0 0 0 S 0 0.0 0:00.11 kjournald 1887 20 0 0 0 0 S 0 0.0 0:00.01 kjournald 2008 20 0 0 0 0 S 0 0.0 0:00.22 flush-8:0 2088 20 0 2004 680 580 S 0 0.0 0:00.09 syslogd 2091 20 0 1888 404 324 S 0 0.0 0:00.03 klogd 2100 20 0 1868 360 232 S 0 0.0 0:00.28 irqbalance 2108 rpc 20 0 2076 600 496 S 0 0.0 0:00.01 portmap 2126 20 0 2108 768 664 S 0 0.0 0:00.06 rpc.statd 2191 20 0 3276 708 584 S 0 0.0 0:00.01 xinetd 2210 20 0 0 0 0 S 0 0.0 0:00.00 lockd 2211 1 -19 0 0 0 S 0 0.0 0:00.92 nfsd 2212 1 -19 0 0 0 S 0 0.0 0:00.86 nfsd 2213 1 -19 0 0 0 S 0 0.0 0:01.15 nfsd 2214 1 -19 0 0 0 S 0 0.0 0:00.85 nfsd 2215 1 -19 0 0 0 S 0 0.0 0:00.77 nfsd 2216 1 -19 0 0 0 S 0 0.0 0:01.13 nfsd 2217 1 -19 0 0 0 S 0 0.0 0:00.95 nfsd 2218 1 -19 0 0 0 S 0 0.0 0:00.64 nfsd 2221 20 0 2352 748 596 S 0 0.0 0:00.02 rpc.mountd 2261 20 0 1884 524 452 S 0 0.0 0:00.01 agetty 2270 15 -5 41208 10m 4540 S 0 0.5 0:22.28 sysd 2285 20 0 97.8m 17m 7900 S 0 0.9 0:02.59 dagger 2286 30 10 41800 7372 3680 S 0 0.4 0:04.41 python 2292 20 0 136m 12m 6512 S 0 0.6 0:02.17 sysdagent 2313 20 0 7208 2604 1592 S 0 0.1 0:00.09 tscat 2315 20 0 67660 9232 4408 S 0 0.5 0:00.64 brdagent 2316 20 0 36052 9144 4388 S 0 0.5 0:00.67 ehmon 2317 20 0 91324 11m 6236 S 0 0.6 0:01.12 chasd 2586 20 0 93164 12m 6900 S 0 0.7 0:01.34 cryptod 2618 20 0 6844 1612 1332 S 0 0.1 0:00.05 sshd I execute commands you request but in this moment traffic is low because my company is not open yet If you wish I will execute this commands later admin@Firewall1> debug log-receiver statistics Logging statistics ------------------------------ ----------- Log incoming rate: 3/sec Log written rate: 3/sec Corrupted packets: 0 Corrupted URL packets: 0 Logs discarded (queue full): 0 Traffic logs written: 5320 URL logs written: 1567 Wildfire logs written: 0 Anti-virus logs written: 0 Spyware logs written: 0 Attack logs written: 0 Vulnerability logs written: 38 Fileext logs written: 22 URL cache age out count: 1251 URL cache full count: 0 URL cache key exist count: 0 Traffic alarms dropped due to sysd write failures: 0 Traffic alarms dropped due to global rate limiting: 0 Traffic alarms dropped due to each source rate limiting: 0 Traffic alarms generated count: 5 Log Forward count: 0 Log Forward discarded (queue full) count: 0 Log Forward discarded (send error) count: 0 Summary Statistics: Num current drop entries in trsum:0 Num cumulative drop entries in trsum:0 Num current drop entries in thsum:0 Num cumulative drop entries in thsum:0 External Forwarding stats: Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min) syslog 0 0 0 0 0 snmp 0 0 0 0 0 email 0 0 0 0 0 raw 0 0 0 0 0 admin@Firewall1> show counter global filter delta yes | match log log_url_cnt 55 1 info log system Number of url logs log_uid_req_cnt 487 13 info log system Number of uid request logs log_traffic_cnt 106 2 info log system Number of traffic logs admin@Firewall1> debug log-receiver statistics Logging statistics ------------------------------ ----------- Log incoming rate: 9/sec Log written rate: 9/sec Corrupted packets: 0 Corrupted URL packets: 0 Logs discarded (queue full): 0 Traffic logs written: 5370 URL logs written: 1587 Wildfire logs written: 0 Anti-virus logs written: 0 Spyware logs written: 0 Attack logs written: 0 Vulnerability logs written: 38 Fileext logs written: 22 URL cache age out count: 1265 URL cache full count: 0 URL cache key exist count: 0 Traffic alarms dropped due to sysd write failures: 0 Traffic alarms dropped due to global rate limiting: 0 Traffic alarms dropped due to each source rate limiting: 0 Traffic alarms generated count: 5 Log Forward count: 0 Log Forward discarded (queue full) count: 0 Log Forward discarded (send error) count: 0 Summary Statistics: Num current drop entries in trsum:0 Num cumulative drop entries in trsum:0 Num current drop entries in thsum:0 Num cumulative drop entries in thsum:0 External Forwarding stats: Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min) syslog 0 0 0 0 0 snmp 0 0 0 0 0 email 0 0 0 0 0 raw 0 0 0 0 0 admin@Firewall1> show counter global filter delta yes | match log log_uid_req_cnt 8 13 info log system Number of uid request logs log_traffic_cnt 1 1 info log system Number of traffic logs admin@Firewall1> debug log-receiver statistics Logging statistics ------------------------------ ----------- Log incoming rate: 2/sec Log written rate: 2/sec Corrupted packets: 0 Corrupted URL packets: 0 Logs discarded (queue full): 0 Traffic logs written: 5406 URL logs written: 1593 Wildfire logs written: 0 Anti-virus logs written: 0 Spyware logs written: 0 Attack logs written: 0 Vulnerability logs written: 38 Fileext logs written: 22 URL cache age out count: 1271 URL cache full count: 0 URL cache key exist count: 0 Traffic alarms dropped due to sysd write failures: 0 Traffic alarms dropped due to global rate limiting: 0 Traffic alarms dropped due to each source rate limiting: 0 Traffic alarms generated count: 5 Log Forward count: 0 Log Forward discarded (queue full) count: 0 Log Forward discarded (send error) count: 0 Summary Statistics: Num current drop entries in trsum:0 Num cumulative drop entries in trsum:0 Num current drop entries in thsum:0 Num cumulative drop entries in thsum:0 External Forwarding stats: Type Enqueue Count Send Count Drop Count Queue Depth Send Rate(last 1min) syslog 0 0 0 0 0 snmp 0 0 0 0 0 email 0 0 0 0 0 raw 0 0 0 0 0 admin@Firewall1> show counter global filter delta yes | match log log_url_cnt 6 0 info log system Number of url logs log_uid_req_cnt 105 12 info log system Number of uid request logs log_traffic_cnt 15 1 info log system Number of traffic logs
... View more
09-15-2014
08:03 AM
Hi, here processes order by memory top - 17:02:46 up 27 days, 22:24, 1 user, load average: 2.61, 1.78, 1.14 Tasks: 101 total, 2 running, 99 sleeping, 0 stopped, 0 zombie Cpu(s): 1.0%us, 12.4%sy, 28.6%ni, 28.6%id, 28.8%wa, 0.0%hi, 0.7%si, 0.0%st Mem: 938136k total, 905796k used, 32340k free, 24248k buffers Swap: 2008084k total, 1173304k used, 834780k free, 107180k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 19972 root 20 0 548m 135m 4692 S 0 14.8 55:02.86 mgmtsrvr 20857 root 20 0 1139m 116m 1792 S 1 12.7 47:51.03 logrcvr 2934 root 20 0 185m 71m 63m S 0 7.8 166:40.49 useridd 2945 root 20 0 256m 62m 7692 S 0 6.8 248:51.91 devsrvr 29182 nobody 20 0 254m 45m 5788 S 0 4.9 13:37.85 appweb3 14964 mauro.bi 20 0 106m 18m 4760 S 0 2.0 0:03.14 cli 2290 root 0 -20 85888 8388 2004 S 0 0.9 168:51.20 masterd_apps 2231 nobody 20 0 154m 7828 3060 S 0 0.8 2:42.88 appweb3 15108 root 20 0 37276 6136 3420 S 0 0.7 0:00.50 masterd_batch 31356 root 20 0 5616 5480 2952 S 0 0.6 0:03.80 ntpd 2318 root 30 10 42968 3752 1672 S 0 0.4 105:52.14 python 2981 root 20 0 108m 3368 2632 S 0 0.4 10:18.13 authd 2978 root 20 0 82772 3352 1108 S 0 0.4 13:18.68 dnsproxyd 2225 nobody 20 0 107m 3272 1536 S 0 0.3 2:21.50 appweb3 2973 root 20 0 217m 2828 1840 S 0 0.3 94:25.18 varrcvr 2317 root 20 0 100m 2772 1684 S 0 0.3 9:04.55 dagger 20881 root 20 0 51260 2772 1376 S 0 0.3 90:29.73 snmpd 2302 root 15 -5 41216 2228 1180 S 0 0.2 305:35.93 sysd 2969 root 20 0 85144 2204 1616 S 0 0.2 14:56.86 ikemgr 14945 root 20 0 21316 2164 1732 S 0 0.2 0:00.15 sshd 2325 root 20 0 139m 2048 1240 S 0 0.2 18:53.06 sysdagent 2980 root 20 0 147m 1904 1128 S 0 0.2 16:18.30 routed 23809 root 20 0 12124 1748 1592 S 0 0.2 0:00.03 wmic 24364 root 20 0 12124 1672 1508 S 1 0.2 0:00.02 wmic 23503 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic 23661 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic 24360 root 20 0 12124 1668 1508 S 1 0.2 0:00.02 wmic 2616 root 20 0 95784 1612 1148 S 0 0.2 10:51.66 cryptod 2972 root 20 0 102m 1432 1056 S 0 0.2 19:01.49 keymgr 14963 mauro.bi 20 0 21452 1432 976 S 0 0.2 0:00.42 sshd 2971 root 20 0 103m 1412 1076 S 0 0.2 11:38.54 rasmgr 2975 root 20 0 121m 1336 1100 S 0 0.1 15:45.74 satd 15113 root 30 10 3892 1336 1088 R 51 0.1 0:39.54 genindex.sh 2976 root 20 0 100m 1300 1136 S 0 0.1 12:29.47 sslmgr 2977 root 20 0 68244 1288 1048 S 0 0.1 16:01.13 pan_dhcpd 2974 root 17 -3 66664 1244 944 S 0 0.1 11:58.24 ha_agent 2352 root 20 0 91092 1184 936 S 0 0.1 10:50.33 chasd 14988 mauro.bi 20 0 4528 1152 884 R 1 0.1 0:02.97 top 2979 root 20 0 80264 1136 988 S 0 0.1 10:22.98 pppoed 15104 root 20 0 3716 1108 980 S 0 0.1 0:00.02 genindex_batch. 7454 root 20 0 9032 1024 888 S 0 0.1 0:08.83 syslog-ng 2346 root 20 0 67660 996 864 S 0 0.1 11:22.86 brdagent 2347 root 20 0 36052 988 840 S 0 0.1 13:46.57 ehmon 2660 root 20 0 6844 868 784 S 0 0.1 0:00.25 sshd 2661 root 20 0 6780 628 624 S 0 0.1 0:00.04 sshd 31283 root 20 0 2896 628 568 S 0 0.1 0:00.30 crond 2088 root 20 0 2004 592 544 S 0 0.1 0:08.15 syslogd 2344 root 20 0 7208 568 564 S 0 0.1 0:00.09 tscat 2221 root 20 0 2480 560 468 S 0 0.1 0:07.41 rpc.mountd 1 root 20 0 1832 544 516 S 0 0.1 0:37.53 init 2126 root 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd 2191 root 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd 15102 root 20 0 2960 492 396 S 0 0.1 0:00.01 crond 2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap 2293 root 20 0 1884 428 424 S 0 0.0 0:00.01 agetty 919 root 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd 2091 root 20 0 1888 328 324 S 0 0.0 0:00.03 klogd 2100 root 20 0 1868 324 228 S 0 0.0 7:55.55 irqbalance 7453 root 20 0 4796 212 208 S 0 0.0 0:00.01 syslog-ng 2 root 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 root RT 0 0 0 0 S 0 0.0 0:09.18 migration/0 4 root 20 0 0 0 0 S 0 0.0 3:35.99 ksoftirqd/0 5 root RT 0 0 0 0 S 0 0.0 0:10.33 migration/1 6 root 20 0 0 0 0 S 0 0.0 3:22.55 ksoftirqd/1 7 root 20 0 0 0 0 S 0 0.0 7:01.03 events/0 8 root 20 0 0 0 0 S 0 0.0 11:04.76 events/1 9 root 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 root 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 111 root 20 0 0 0 0 S 0 0.0 0:04.41 sync_supers 113 root 20 0 0 0 0 S 0 0.0 0:07.04 bdi-default 114 root 20 0 0 0 0 S 0 0.0 2:51.71 kblockd/0
... View more
09-15-2014
08:02 AM
Hi, here the output for show system resource follow top - 16:58:02 up 27 days, 22:19, 1 user, load average: 0.13, 0.25, 0.63 Tasks: 97 total, 1 running, 96 sleeping, 0 stopped, 0 zombie Cpu(s): 5.3%us, 2.0%sy, 0.0%ni, 91.4%id, 0.3%wa, 0.3%hi, 0.7%si, 0.0%st Mem: 938136k total, 906024k used, 32112k free, 21768k buffers Swap: 2008084k total, 1180812k used, 827272k free, 127528k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 19972 root 20 0 544m 132m 4284 S 0 14.5 54:52.32 mgmtsrvr 20857 root 20 0 1140m 116m 1736 S 1 12.8 47:49.32 logrcvr 2934 root 20 0 185m 71m 64m S 0 7.8 166:39.18 useridd 2945 root 20 0 256m 62m 7600 S 0 6.8 248:51.73 devsrvr 29182 nobody 20 0 219m 35m 4300 S 0 3.9 13:07.20 appweb3 14964 mauro.bi 20 0 106m 26m 12m S 0 2.9 0:03.14 cli 2290 root 0 -20 85888 8416 2024 S 1 0.9 168:49.79 masterd_apps 2231 nobody 20 0 154m 6344 1708 S 0 0.7 2:41.34 appweb3 31356 root 20 0 5616 5480 2952 S 0 0.6 0:03.76 ntpd 2981 root 20 0 108m 4436 3704 S 0 0.5 10:17.84 authd 2318 root 30 10 42968 3756 1672 S 0 0.4 105:51.41 python 2978 root 20 0 82772 3544 1288 S 0 0.4 13:18.59 dnsproxyd 2225 nobody 20 0 107m 3280 1536 S 0 0.3 2:21.36 appweb3 2973 root 20 0 217m 2940 1944 S 0 0.3 94:25.06 varrcvr 20881 root 20 0 51260 2776 1376 S 0 0.3 90:28.72 snmpd 2317 root 20 0 100m 2768 1692 S 0 0.3 9:04.47 dagger 14945 root 20 0 21316 2468 2036 S 0 0.3 0:00.15 sshd 2302 root 15 -5 41216 2232 1180 S 11 0.2 305:33.28 sysd 2325 root 20 0 139m 2032 1240 S 0 0.2 18:52.88 sysdagent 2980 root 20 0 147m 1912 1128 S 0 0.2 16:18.18 routed 2969 root 20 0 85144 1836 1268 S 0 0.2 14:56.74 ikemgr 14953 root 20 0 12124 1672 1508 S 0 0.2 0:00.02 wmic 14981 root 20 0 12124 1672 1508 S 0 0.2 0:00.02 wmic 14968 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic 14986 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic 14954 root 20 0 12124 1664 1508 S 0 0.2 0:00.02 wmic 2616 root 20 0 95784 1656 1192 S 0 0.2 10:51.59 cryptod 14963 mauro.bi 20 0 21452 1512 1056 S 1 0.2 0:00.03 sshd 2972 root 20 0 102m 1420 1044 S 0 0.2 19:01.11 keymgr 2971 root 20 0 103m 1416 1076 S 0 0.2 11:38.45 rasmgr 2975 root 20 0 121m 1336 1100 S 0 0.1 15:45.63 satd 2977 root 20 0 68244 1336 1096 S 0 0.1 16:01.00 pan_dhcpd 2976 root 20 0 100m 1300 1136 S 0 0.1 12:29.34 sslmgr 2974 root 17 -3 66664 1272 972 S 0 0.1 11:58.16 ha_agent 2352 root 20 0 91092 1184 936 S 0 0.1 10:49.51 chasd 14988 mauro.bi 20 0 4528 1156 904 R 2 0.1 0:00.09 top 2979 root 20 0 80264 1136 988 S 0 0.1 10:22.90 pppoed 7454 root 20 0 9032 1044 908 S 0 0.1 0:08.83 syslog-ng 2346 root 20 0 67660 996 864 S 0 0.1 11:22.77 brdagent 2347 root 20 0 36052 988 840 S 0 0.1 13:46.47 ehmon 2660 root 20 0 6844 876 792 S 0 0.1 0:00.25 sshd 2661 root 20 0 6780 628 624 S 0 0.1 0:00.04 sshd 31283 root 20 0 2896 628 568 S 0 0.1 0:00.29 crond 2221 root 20 0 2480 604 512 S 0 0.1 0:07.41 rpc.mountd 2088 root 20 0 2004 592 544 S 0 0.1 0:08.15 syslogd 2344 root 20 0 7208 568 564 S 0 0.1 0:00.09 tscat 1 root 20 0 1832 544 516 S 0 0.1 0:37.52 init 2126 root 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd 2191 root 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd 2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap 2293 root 20 0 1884 428 424 S 0 0.0 0:00.01 agetty 919 root 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd 2091 root 20 0 1888 328 324 S 0 0.0 0:00.03 klogd 2100 root 20 0 1868 324 228 S 0 0.0 7:55.50 irqbalance 7453 root 20 0 4796 212 208 S 0 0.0 0:00.01 syslog-ng 2 root 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 root RT 0 0 0 0 S 0 0.0 0:09.18 migration/0 4 root 20 0 0 0 0 S 0 0.0 3:35.96 ksoftirqd/0 5 root RT 0 0 0 0 S 0 0.0 0:10.32 migration/1 6 root 20 0 0 0 0 S 0 0.0 3:22.51 ksoftirqd/1 7 root 20 0 0 0 0 S 1 0.0 7:00.96 events/0 8 root 20 0 0 0 0 S 0 0.0 11:04.68 events/1 9 root 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 root 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 111 root 20 0 0 0 0 S 0 0.0 0:04.41 sync_supers 113 root 20 0 0 0 0 S 0 0.0 0:07.04 bdi-default 114 root 20 0 0 0 0 S 0 0.0 2:51.66 kblockd/0 115 root 20 0 0 0 0 S 0 0.0 2:44.75 kblockd/1 124 root 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 125 root 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 126 root 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux I reduced logging on my device (removing DNS, DHCP, ActiveDirectory and other unuseful logs) but I need to log all web traffic Also I reduced maximum log size on disk as you can see on this picture but management interface is still very slow
... View more
09-15-2014
06:13 AM
Hi, our PAN OS versione is 6.0.4 Here the output (but I restared managerment server yesterday): top - 15:09:59 up 27 days, 20:31, 1 user, load average: 0.18, 0.30, 0.57 Tasks: 100 total, 1 running, 99 sleeping, 0 stopped, 0 zombie Cpu(s): 3.3%us, 5.6%sy, 10.7%ni, 70.5%id, 9.7%wa, 0.0%hi, 0.2%si, 0.0%st Mem: 938136k total, 878980k used, 59156k free, 44280k buffers Swap: 2008084k total, 1240780k used, 767304k free, 135576k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2977 20 0 68244 1360 1104 S 2 0.1 15:58.35 pan_dhcpd 8149 20 0 4464 1012 784 R 2 0.1 0:00.04 top 20857 20 0 1139m 116m 1864 S 2 12.7 47:13.25 logrcvr 1 20 0 1832 544 516 S 0 0.1 0:37.43 init 2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:09.15 migration/0 4 20 0 0 0 0 S 0 0.0 3:35.21 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:10.29 migration/1 6 20 0 0 0 0 S 0 0.0 3:21.78 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 6:59.72 events/0 8 20 0 0 0 0 S 0 0.0 11:02.93 events/1 9 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 111 20 0 0 0 0 S 0 0.0 0:04.40 sync_supers 113 20 0 0 0 0 S 0 0.0 0:07.02 bdi-default 114 20 0 0 0 0 S 0 0.0 2:51.33 kblockd/0 115 20 0 0 0 0 S 0 0.0 2:44.42 kblockd/1 124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 131 20 0 0 0 0 S 0 0.0 0:00.00 khubd 134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 S 0 0.0 68:02.37 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod 765 20 0 0 0 0 S 0 0.0 4:29.31 octeon-ethernet 793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 798 20 0 0 0 0 S 0 0.0 0:01.18 mtdblockd 826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 866 20 0 0 0 0 S 0 0.0 1:57.10 kjournald 919 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd 1888 20 0 0 0 0 S 0 0.0 0:09.18 kjournald 1889 20 0 0 0 0 S 0 0.0 0:00.01 kjournald 1944 20 0 0 0 0 S 0 0.0 4:29.14 flush-8:0 2088 20 0 2004 592 544 S 0 0.1 0:08.12 syslogd 2091 20 0 1888 328 324 S 0 0.0 0:00.03 klogd 2100 20 0 1868 324 228 S 0 0.0 7:54.23 irqbalance 2108 rpc 20 0 2076 428 424 S 0 0.0 0:00.01 portmap 2126 20 0 2108 544 540 S 0 0.1 0:00.06 rpc.statd 2191 20 0 3276 528 524 S 0 0.1 0:00.01 xinetd 2210 20 0 0 0 0 S 0 0.0 0:00.00 lockd 2211 1 -19 0 0 0 S 0 0.0 3:35.35 nfsd 2212 1 -19 0 0 0 S 0 0.0 3:43.64 nfsd 2213 1 -19 0 0 0 S 0 0.0 3:35.33 nfsd 2214 1 -19 0 0 0 S 0 0.0 3:37.45 nfsd 2215 1 -19 0 0 0 S 0 0.0 3:39.36 nfsd 2216 1 -19 0 0 0 S 0 0.0 3:29.24 nfsd 2217 1 -19 0 0 0 S 0 0.0 3:39.09 nfsd 2218 1 -19 0 0 0 S 0 0.0 3:37.14 nfsd 2221 20 0 2480 604 512 S 0 0.1 0:07.39 rpc.mountd 2225 nobody 20 0 107m 5228 2664 S 0 0.6 2:18.35 appweb3 2231 nobody 20 0 154m 8604 3160 S 0 0.9 2:35.13 appweb3 2290 0 -20 85888 8404 2028 S 0 0.9 168:22.72 masterd_apps 2293 20 0 1884 428 424 S 0 0.0 0:00.01 agetty 2302 15 -5 41216 2260 1188 S 0 0.2 304:41.02 sysd 2317 20 0 100m 1112 1024 S 0 0.1 9:02.95 dagger 2318 30 10 42968 3728 1672 S 0 0.4 105:34.18 python 2325 20 0 139m 1908 1176 S 0 0.2 18:49.81 sysdagent 2344 20 0 7208 568 564 S 0 0.1 0:00.09 tscat 2346 20 0 67660 996 864 S 0 0.1 11:20.87 brdagent 2347 20 0 36052 988 840 S 0 0.1 13:44.24 ehmon 2352 20 0 91092 1172 928 S 0 0.1 10:47.23 chasd 2616 20 0 95784 1668 1196 S 0 0.2 10:49.90 cryptod 2660 20 0 6844 876 792 S 0 0.1 0:00.25 sshd 2661 20 0 6780 628 624 S 0 0.1 0:00.04 sshd 2665 20 0 0 0 0 S 0 0.0 2:24.26 kjournald Usually I have this situation (see PA-500 CLI and web interface unbearably slow ) ORDER BY CPU top - 13:04:59 up 10 days, 18:26, 1 user, load average: 1.24, 1.58, 3.50 Tasks: 104 total, 3 running, 101 sleeping, 0 stopped, 0 zombie Cpu(s): 3.7%us, 5.8%sy, 11.2%ni, 68.2%id, 10.9%wa, 0.0%hi, 0.2%si, 0.0%st Mem: 938136k total, 897268k used, 40868k free, 34108k buffers Swap: 2008084k total, 1521284k used, 486800k free, 111064k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 22839 30 10 4012 1384 1088 R 60 0.1 1:33.20 genindex.sh 7235 20 0 4464 1016 784 R 4 0.1 0:00.05 top 2972 20 0 102m 1448 1072 S 2 0.2 6:26.11 keymgr 20881 20 0 49912 2100 1388 S 2 0.2 8:28.13 snmpd 1 20 0 1832 544 516 S 0 0.1 0:15.38 init 2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:03.61 migration/0 4 20 0 0 0 0 S 0 0.0 1:25.80 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:03.97 migration/1 6 20 0 0 0 0 S 0 0.0 1:21.47 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 2:43.78 events/0 8 20 0 0 0 0 S 0 0.0 4:18.32 events/1 9 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 111 20 0 0 0 0 S 0 0.0 0:01.70 sync_supers 113 20 0 0 0 0 S 0 0.0 0:02.73 bdi-default 114 20 0 0 0 0 S 0 0.0 1:19.88 kblockd/0 115 20 0 0 0 0 S 0 0.0 1:16.84 kblockd/1 124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 131 20 0 0 0 0 S 0 0.0 0:00.00 khubd 134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 R 0 0.0 27:54.79 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod 765 20 0 0 0 0 S 0 0.0 1:44.30 octeon-ethernet 793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 798 20 0 0 0 0 S 0 0.0 0:01.18 mtdblockd 826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 866 20 0 0 0 0 S 0 0.0 0:43.94 kjournald 919 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd 1172 20 0 21316 2468 2036 S 0 0.3 0:00.14 sshd Tomorrow I will upgrade RAM to 2GB on PA500 I hope it will solve some problems....
... View more
09-15-2014
02:47 AM
Hi, regarding GUI slowness I've a question: a lot of people suggest to restart management server. How can I schedule a night restart of it? Thanks regards
... View more
Labels:
08-29-2014
04:07 AM
Hi,I've got the same problem with PA500 and PAN OS 6.0.4 In my case the process geindex.sh use a lot of cpu ORDER BY CPU top - 13:04:59 up 10 days, 18:26, 1 user, load average: 1.24, 1.58, 3.50 Tasks: 104 total, 3 running, 101 sleeping, 0 stopped, 0 zombie Cpu(s): 3.7%us, 5.8%sy, 11.2%ni, 68.2%id, 10.9%wa, 0.0%hi, 0.2%si, 0.0%st Mem: 938136k total, 897268k used, 40868k free, 34108k buffers Swap: 2008084k total, 1521284k used, 486800k free, 111064k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 22839 30 10 4012 1384 1088 R 60 0.1 1:33.20 genindex.sh 7235 20 0 4464 1016 784 R 4 0.1 0:00.05 top 2972 20 0 102m 1448 1072 S 2 0.2 6:26.11 keymgr 20881 20 0 49912 2100 1388 S 2 0.2 8:28.13 snmpd 1 20 0 1832 544 516 S 0 0.1 0:15.38 init 2 20 0 0 0 0 S 0 0.0 0:00.01 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:03.61 migration/0 4 20 0 0 0 0 S 0 0.0 1:25.80 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:03.97 migration/1 6 20 0 0 0 0 S 0 0.0 1:21.47 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 2:43.78 events/0 8 20 0 0 0 0 S 0 0.0 4:18.32 events/1 9 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 111 20 0 0 0 0 S 0 0.0 0:01.70 sync_supers 113 20 0 0 0 0 S 0 0.0 0:02.73 bdi-default 114 20 0 0 0 0 S 0 0.0 1:19.88 kblockd/0 115 20 0 0 0 0 S 0 0.0 1:16.84 kblockd/1 124 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 126 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 131 20 0 0 0 0 S 0 0.0 0:00.00 khubd 134 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 155 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 R 0 0.0 27:54.79 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 1 -19 0 0 0 S 0 0.0 0:00.00 nfsiod 765 20 0 0 0 0 S 0 0.0 1:44.30 octeon-ethernet 793 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 798 20 0 0 0 0 S 0 0.0 0:01.18 mtdblockd 826 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 866 20 0 0 0 0 S 0 0.0 0:43.94 kjournald 919 16 -4 1992 392 388 S 0 0.0 0:01.03 udevd 1172 20 0 21316 2468 2036 S 0 0.3 0:00.14 sshd ORDER BY MEMORY top - 13:06:19 up 10 days, 18:27, 1 user, load average: 0.91, 1.42, 3.28 Tasks: 104 total, 3 running, 101 sleeping, 0 stopped, 0 zombie Cpu(s): 0.8%us, 10.5%sy, 27.2%ni, 30.7%id, 30.7%wa, 0.2%hi, 0.0%si, 0.0%st Mem: 938136k total, 900764k used, 37372k free, 30892k buffers Swap: 2008084k total, 1521292k used, 486792k free, 109728k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 5843 root 20 0 863m 86m 2824 S 0 9.5 98:37.92 mgmtsrvr 2970 root 20 0 1074m 85m 1664 D 1 9.4 44:07.18 logrcvr 2945 root 20 0 242m 83m 8664 S 0 9.1 111:50.75 devsrvr 2934 root 20 0 183m 69m 63m S 0 7.6 64:02.18 useridd 1818 mauro.bi 20 0 106m 25m 11m S 0 2.8 0:03.50 cli 7432 nobody 20 0 271m 15m 1552 S 0 1.7 86:48.31 appweb3 2290 root 0 -20 85888 8292 2000 S 0 0.9 65:17.81 masterd_apps 8505 nobody 20 0 111m 6112 3180 S 0 0.7 7:58.57 appweb3 22664 root 20 0 37276 6044 3324 S 0 0.6 0:00.79 masterd_batch 8503 nobody 20 0 176m 5500 2504 S 0 0.6 8:07.93 appweb3 20681 root 20 0 5616 5480 2952 S 0 0.6 0:00.59 ntpd 2981 root 20 0 107m 4320 3632 S 0 0.5 4:02.39 authd 2318 root 30 10 42968 3732 1668 S 0 0.4 40:58.18 python 2978 root 20 0 82772 3640 1120 S 0 0.4 5:10.94 dnsproxyd 1172 root 20 0 21316 2416 1984 S 0 0.3 0:00.14 sshd 2302 root 15 -5 41216 2268 1200 S 0 0.2 117:49.65 sysd 2969 root 20 0 85144 2248 1688 S 0 0.2 5:57.16 ikemgr 2980 root 20 0 147m 2104 1128 S 0 0.2 6:19.41 routed 20881 root 20 0 49912 2092 1384 S 0 0.2 8:28.39 snmpd 2973 root 20 0 217m 1972 1292 S 0 0.2 38:48.62 varrcvr 2325 root 20 0 139m 1940 1164 S 0 0.2 7:22.91 sysdagent 2971 root 20 0 103m 1892 1460 S 0 0.2 4:32.53 rasmgr 2317 root 20 0 100m 1716 1268 S 0 0.2 3:45.53 dagger 2616 root 20 0 95912 1684 1188 S 0 0.2 4:17.02 cryptod 10375 root 20 0 12124 1668 1508 S 0 0.2 0:00.02 wmic Any idea? Thanks Regards
... View more
06-26-2014
03:26 AM
I follow this guide and I create a pkcs12 chained certificate with this command: openssl pkcs12 -export -in [certificate.pem] -inkey [certificate.key] -CAfile [chain.cer] -caname digicert -out [server-chain.p12] -name digicert -chain but when I import my certificate (IMPORTANT: it is a web server certificate) it is not recognized as a CA. I think problem is that my certificate was request for a web server. If I try to install DigiCert CA root certificate it is recognized as a CA but I cannot use it for decryption.
... View more
06-25-2014
08:26 AM
Thanks but in case of a Certification Authority like Verisign or Digicert I need to request a new certificate (signed by them) or I need to import a root certificate? Thanks
... View more
06-25-2014
07:58 AM
Hi, I have a PA500 (OS 5.0.11) I already configured it for SSL Decryption with a self signed certificate. I need to use a Digicert Certificate. I already have a wildcard certificate with Digicert. Question is: can I use my wildcard certificate for SSL Decryption? How? I try to import my certificate but I cannot use it for SSL Decryption Thanks Regards
... View more
03-27-2013
05:48 AM
Other tests: I configure a DHCP server responding on interface 10.168.0.0/16 (VR1) Then I configure DHCP realy from interface 192.168.2.0/24 (VR2) to DHCP Server on VR1 It works! There is some bug that do not correctly routes packet from new virtual routers to default virtual router IP interfaces? Problem concern only firewall interfaces IP addresses and not the entire subnet.
... View more
03-27-2013
01:14 AM
admin@Firewall1> show counter global filter packet-filter yes delta yes Global counters: Elapsed time since last sampling: 139.941 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_recv 191853 1370 info packet pktproc Packets received pkt_sent 27 0 info packet pktproc Packets transmitted pkt_outstanding 27 0 info packet pktproc Outstanding packet to be transmitted pkt_alloc 15 0 info packet resource Packets allocated session_allocated 2 0 info session resource Sessions allocated session_installed 2 0 info session resource Sessions installed flow_rcv_dot1q_tag_err 28 0 drop flow parse Packets dropped: 802.1q tag not configured flow_no_interface 28 0 drop flow parse Packets dropped: invalid interface flow_qos_pkt_enque 5 0 info flow qos Packet enqueued to QoS module flow_host_pkt_rcv 1496 10 info flow mgmt Packets received from control plane flow_host_pkt_xmt 22 0 info flow mgmt Packets transmitted to control plane flow_host_service_allow 7 0 info flow mgmt Device management session allowed appid_proc 2 0 info appid pktproc The number of packets processed by Application identification dfa_sw 2 0 info dfa pktproc The total number of dfa match using software aho_sw 5 0 info aho pktproc The total usage of software for AHO ctd_pkt_slowpath 8 0 info ctd pktproc Packets processed by slowpath -------------------------------------------------------------------------------- Total counters shown: 16 -------------------------------------------------------------------------------- admin@Firewall1> show counter global filter packet-filter yes delta yes Global counters: Elapsed time since last sampling: 8.178 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_recv 10218 1249 info packet pktproc Packets received pkt_sent 2 0 info packet pktproc Packets transmitted pkt_outstanding 2 0 info packet pktproc Outstanding packet to be transmitted flow_rcv_dot1q_tag_err 1 0 drop flow parse Packets dropped: 802.1q tag not configured flow_no_interface 1 0 drop flow parse Packets dropped: invalid interface flow_host_pkt_rcv 82 10 info flow mgmt Packets received from control plane flow_host_pkt_xmt 2 0 info flow mgmt Packets transmitted to control plane flow_host_service_allow 2 0 info flow mgmt Device management session allowed -------------------------------------------------------------------------------- Total counters shown: 8 --------------------------------------------------------------------------------
... View more
03-26-2013
08:54 AM
I capture DHCP packets and I see - DHCP Discover session from 10.168.100.1 to 192.168.2.100 - DHCP Offer Transaction from 192.168.2.100 to 10.168.100.1 Client IP address: 0.0.0.0 (0.0.0.0) Your (client) IP address: 10.168.100.50 (10.168.100.50) Next server IP address: 192.168.2.100 (192.168.2.100) Relay agent IP address: 10.168.100.1 (10.168.100.1) I think problem is routing between VR2 to VR1 Ping tests: Ping from a VR1 host (10.168.100.2) to VR2 host 192.168.2.100 works Ping from a VR1 host (10.168.100.2) to VR2 INTERFACE 192.168.2.1 works Ping from a VR2 host (192.168.2.100) to VR1 host 10.168.100.2 works Ping from a VR2 host (192.168.2.100) to VR1 INTERFACE 10.168.100.1 does not work (but I see in monitor it match an allow rule)
... View more
03-26-2013
06:55 AM
Hi, here the result: Global counters: Elapsed time since last sampling: 166.235 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_sent 6 0 info packet pktproc Packets transmitted pkt_outstanding 6 0 info packet pktproc Outstanding packet to be transmitted session_allocated 1 0 info session resource Sessions allocated session_installed 1 0 info session resource Sessions installed flow_qos_pkt_enque 3 0 info flow qos Packet enqueued to QoS module flow_host_pkt_xmt 3 0 info flow mgmt Packets transmitted to control plane flow_host_service_allow 3 0 info flow mgmt Device management session allowed appid_proc 1 0 info appid pktproc The number of packets processed by Application identification dfa_sw 1 0 info dfa pktproc The total number of dfa match using software aho_sw 3 0 info aho pktproc The total usage of software for AHO ctd_pkt_slowpath 6 0 info ctd pktproc Packets processed by slowpath -------------------------------------------------------------------------------- Total counters shown: 11 --------------------------------------------------------------------------------
... View more
03-25-2013
07:37 AM
Hi, I have a problem with some untrusted issuer. For example Microsoft TechNet site ( https://technet.microsoft.com ) is blocked from my PA500 with this error: Certificate Error Certificate name: technet.microsoft.com IP Address: 65.52.103.106 Issuer: MSIT Machine Auth CA 2 Status: untrusted Reason: I downloaded MSIT Machine Auth CA 2 certificate from microsoft site ( Microsoft Federation Services Certificate Information Page ) and I import it into my certificate but I receive the same error. Can someone help me? Thanks
... View more
Labels:
03-21-2013
12:49 AM
Hi, I have a PA500 configured with 2 virtual routers In both virtual routers I have some zone, interfaces and networks. For example: VR1 - Zone1: Network Ethernet1/1.1 - Interface Type Layer3 - Tag 1 - IP 10.168.100.1 / 16 - Zone2: Network Ethernet1/1.2 - Interface Type Layer3 - Tag 2 - IP 192.168.50.1 / 24 VR2 - Zone3: Network Ethernet1/2.1 - Interface Type Layer3 - Tag 3 - IP 192.168.1.1 / 24 - Zone4: Network Ethernet1/2.2 - Interface Type Layer3 - Tag 4 - IP 192.168.2.1 / 24 In both virtual routers I configured static routes for internal routing. In VR1 I configured route for 192.168.1.0 / 24 via next VR - VR2 route for 192.168.2.0 / 24 via next VR - VR2 in VR2 I configured route for 10.168.0.0 / 16 via next VR - VR1 route for 192.168.50.0 / 24 via next VR - VR1 I have a DHCP server on Zone4 DHCP Server IP: 192.168.2.100 mask 255.255.255.0 Gateway: 192.168.2.1 If I configure my PA500 as DHCP relay for Ethernet1/2.1 (DHCP server 192.168.2.100) all works fine But when I configure DHCP relay for Ethernet1/1.1 (DHCP server 192.168.2.100) I see packet go correctly to DHCP server but they cannot come back. In monitor I see allowed packets from 10.168.100.1 to 192.168.2.100 - application DHCP Can DHCP realy works in a virtual routers scenario? How? Thanks Regards
... View more
Labels:
02-25-2013
09:01 AM
I have the same problem: PAN OS release 5.0.2 top - 17:59:34 up 3 days, 9:19, 1 user, load average: 7.70, 7.47, 7.32 Tasks: 100 total, 2 running, 98 sleeping, 0 stopped, 0 zombie Cpu(s): 27.1%us, 24.2%sy, 18.8%ni, 27.9%id, 1.8%wa, 0.0%hi, 0.2%si, 0.0%st Mem: 995872k total, 934576k used, 61296k free, 14248k buffers Swap: 2008084k total, 169024k used, 1839060k free, 246348k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2476 20 0 183m 72m 64m S 183 7.4 4347:37 useridd 27445 30 10 62036 21m 4272 R 15 2.3 0:02.21 pan_logdb_index 27453 20 0 4468 1028 800 R 5 0.1 0:00.06 top 1 20 0 1836 556 528 S 0 0.1 0:00.96 init 2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:01.53 migration/0 4 20 0 0 0 0 S 0 0.0 0:00.07 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:01.78 migration/1 6 20 0 0 0 0 S 0 0.0 0:00.03 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 0:13.57 events/0 8 20 0 0 0 0 S 0 0.0 0:13.38 events/1 9 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 112 20 0 0 0 0 S 0 0.0 0:00.00 sync_supers 114 20 0 0 0 0 S 0 0.0 0:00.00 bdi-default 115 20 0 0 0 0 S 0 0.0 0:02.45 kblockd/0 116 20 0 0 0 0 S 0 0.0 0:01.62 kblockd/1 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 126 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 127 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 132 20 0 0 0 0 S 0 0.0 0:00.00 khubd 135 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 157 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 S 0 0.0 11:01.97 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 20 0 0 0 0 S 0 0.0 0:00.00 nfsiod 732 20 0 0 0 0 S 0 0.0 0:00.10 octeon-ethernet 760 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 765 20 0 0 0 0 S 0 0.0 0:00.97 mtdblockd 793 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 833 20 0 0 0 0 S 0 0.0 0:06.93 kjournald 886 16 -4 1996 440 400 S 0 0.0 0:01.15 udevd 1850 20 0 0 0 0 S 0 0.0 0:00.09 kjournald 1851 20 0 0 0 0 S 0 0.0 0:00.00 kjournald 1963 20 0 0 0 0 S 0 0.0 0:04.59 flush-8:0 2043 20 0 2008 664 576 S 0 0.1 0:00.23 syslogd 2046 20 0 1892 380 328 S 0 0.0 0:00.04 klogd 2055 20 0 1872 332 236 S 0 0.0 0:00.06 irqbalance 2063 rpc 20 0 2084 500 444 S 0 0.1 0:00.00 portmap 2081 20 0 2116 592 588 S 0 0.1 0:00.05 rpc.statd 2150 20 0 6868 668 576 S 0 0.1 0:00.01 sshd 2198 20 0 6804 444 440 S 0 0.0 0:00.00 sshd 2207 20 0 3280 584 580 S 0 0.1 0:00.01 xinetd 2226 20 0 0 0 0 S 0 0.0 0:00.00 lockd 2227 20 0 0 0 0 S 0 0.0 0:19.59 nfsd 2228 20 0 0 0 0 S 0 0.0 0:25.23 nfsd 2229 20 0 0 0 0 S 0 0.0 0:22.94 nfsd 2230 20 0 0 0 0 S 0 0.0 0:25.19 nfsd 2231 20 0 0 0 0 S 0 0.0 0:16.96 nfsd 2232 20 0 0 0 0 S 0 0.0 0:26.38 nfsd 2233 20 0 0 0 0 S 0 0.0 0:23.47 nfsd 2234 20 0 0 0 0 S 0 0.0 0:18.89 nfsd 2237 20 0 2360 684 552 S 0 0.1 0:00.59 rpc.mountd 2295 0 -20 65244 5096 2052 S 0 0.5 7:31.04 masterd_core 2305 0 -20 27864 1568 1172 S 0 0.2 0:46.44 masterd_manager 2312 15 -5 36460 2164 1304 S 0 0.2 46:17.24 sysd 2314 0 -20 32356 5708 1196 S 0 0.6 10:06.28 masterd_manager 2320 20 0 92040 6656 2580 S 0 0.7 0:02.82 dagger 2321 30 10 40568 3832 1772 S 0 0.4 9:21.69 python 2322 20 0 76640 3024 1532 S 0 0.3 0:01.30 cryptod 2323 20 0 166m 2124 1436 S 0 0.2 1:48.61 sysdagent 2339 20 0 7212 1268 1088 S 0 0.1 0:00.07 tscat 2340 20 0 71580 1240 1080 S 0 0.1 0:07.09 brdagent 2341 20 0 31780 1256 1092 S 0 0.1 0:07.41 ehmon 2342 20 0 47496 1236 1088 S 0 0.1 0:00.57 chasd
... View more
02-25-2013
08:55 AM
Now I cannot come back to 5.0.1 Here the output on 5.0.2 top - 17:55:29 up 3 days, 9:15, 1 user, load average: 7.23, 7.18, 7.23 Tasks: 100 total, 2 running, 98 sleeping, 0 stopped, 0 zombie Cpu(s): 27.1%us, 24.1%sy, 18.8%ni, 28.0%id, 1.8%wa, 0.0%hi, 0.2%si, 0.0%st Mem: 995872k total, 889880k used, 105992k free, 12516k buffers Swap: 2008084k total, 166616k used, 1841468k free, 210132k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 2476 20 0 183m 72m 64m S 187 7.4 4340:44 useridd 26581 30 10 56488 16m 4272 R 5 1.7 0:01.23 pan_logdb_index 26589 20 0 4468 1028 800 R 4 0.1 0:00.05 top 1 20 0 1836 556 528 S 0 0.1 0:00.96 init 2 20 0 0 0 0 S 0 0.0 0:00.00 kthreadd 3 RT 0 0 0 0 S 0 0.0 0:01.53 migration/0 4 20 0 0 0 0 S 0 0.0 0:00.07 ksoftirqd/0 5 RT 0 0 0 0 S 0 0.0 0:01.78 migration/1 6 20 0 0 0 0 S 0 0.0 0:00.03 ksoftirqd/1 7 20 0 0 0 0 S 0 0.0 0:13.57 events/0 8 20 0 0 0 0 S 0 0.0 0:13.36 events/1 9 20 0 0 0 0 S 0 0.0 0:00.05 khelper 12 20 0 0 0 0 S 0 0.0 0:00.00 async/mgr 112 20 0 0 0 0 S 0 0.0 0:00.00 sync_supers 114 20 0 0 0 0 S 0 0.0 0:00.00 bdi-default 115 20 0 0 0 0 S 0 0.0 0:02.45 kblockd/0 116 20 0 0 0 0 S 0 0.0 0:01.62 kblockd/1 125 20 0 0 0 0 S 0 0.0 0:00.00 ata/0 126 20 0 0 0 0 S 0 0.0 0:00.00 ata/1 127 20 0 0 0 0 S 0 0.0 0:00.00 ata_aux 132 20 0 0 0 0 S 0 0.0 0:00.00 khubd 135 20 0 0 0 0 S 0 0.0 0:00.00 kseriod 156 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/0 157 20 0 0 0 0 S 0 0.0 0:00.00 rpciod/1 172 20 0 0 0 0 S 0 0.0 11:01.95 kswapd0 173 20 0 0 0 0 S 0 0.0 0:00.00 aio/0 174 20 0 0 0 0 S 0 0.0 0:00.00 aio/1 175 20 0 0 0 0 S 0 0.0 0:00.00 nfsiod 732 20 0 0 0 0 S 0 0.0 0:00.10 octeon-ethernet 760 20 0 0 0 0 S 0 0.0 0:00.00 scsi_eh_0 765 20 0 0 0 0 S 0 0.0 0:00.97 mtdblockd 793 20 0 0 0 0 S 0 0.0 0:00.00 usbhid_resumer 833 20 0 0 0 0 S 0 0.0 0:06.93 kjournald 886 16 -4 1996 440 400 S 0 0.0 0:01.15 udevd 1850 20 0 0 0 0 S 0 0.0 0:00.09 kjournald 1851 20 0 0 0 0 S 0 0.0 0:00.00 kjournald 1963 20 0 0 0 0 S 0 0.0 0:04.58 flush-8:0 2043 20 0 2008 664 576 S 0 0.1 0:00.23 syslogd 2046 20 0 1892 380 328 S 0 0.0 0:00.04 klogd 2055 20 0 1872 332 236 S 0 0.0 0:00.06 irqbalance 2063 rpc 20 0 2084 500 444 S 0 0.1 0:00.00 portmap 2081 20 0 2116 592 588 S 0 0.1 0:00.05 rpc.statd 2150 20 0 6868 672 576 S 0 0.1 0:00.01 sshd 2198 20 0 6804 444 440 S 0 0.0 0:00.00 sshd 2207 20 0 3280 584 580 S 0 0.1 0:00.01 xinetd 2226 20 0 0 0 0 S 0 0.0 0:00.00 lockd 2227 20 0 0 0 0 S 0 0.0 0:19.59 nfsd 2228 20 0 0 0 0 S 0 0.0 0:25.22 nfsd 2229 20 0 0 0 0 S 0 0.0 0:22.94 nfsd 2230 20 0 0 0 0 S 0 0.0 0:25.19 nfsd 2231 20 0 0 0 0 S 0 0.0 0:16.96 nfsd 2232 20 0 0 0 0 S 0 0.0 0:26.38 nfsd 2233 20 0 0 0 0 S 0 0.0 0:23.46 nfsd 2234 20 0 0 0 0 S 0 0.0 0:18.89 nfsd 2237 20 0 2360 684 552 S 0 0.1 0:00.59 rpc.mountd 2295 0 -20 65244 5100 2052 S 0 0.5 7:30.70 masterd_core 2305 0 -20 27864 1568 1172 S 0 0.2 0:46.41 masterd_manager 2312 15 -5 36716 2172 1304 S 0 0.2 46:15.02 sysd 2314 0 -20 32356 5708 1196 S 0 0.6 10:05.93 masterd_manager 2320 20 0 92040 6696 2580 S 0 0.7 0:02.82 dagger 2321 30 10 40568 3832 1772 S 0 0.4 9:21.27 python 2322 20 0 76640 3040 1528 S 0 0.3 0:01.25 cryptod 2323 20 0 166m 2124 1436 S 0 0.2 1:48.51 sysdagent 2339 20 0 7212 1280 1088 S 0 0.1 0:00.07 tscat 2340 20 0 71580 1240 1080 S 0 0.1 0:07.05 brdagent 2341 20 0 31780 1256 1092 S 0 0.1 0:07.38 ehmon
... View more
02-25-2013
08:38 AM
Hi, my PA500 management CPU is 100% PAN OS release 5.0.2 (same problem with 5.0.1) If I reboot the firewall, management CPU usage goes down for some days than raise again to 100%
... View more
- Tags:
- 5.0
- cpu
- management
Labels:
11-21-2012
05:01 AM
After few hours problem disappear. I don't know why. Thanks
... View more
Latest Blogs
Latest Posts
Copyright 2007 - 2020 - Palo Alto Networks
