About ChrisIsett

ChrisIsett · ‎12-06-2021

I found this command starting in 10.X. show transceiver-detail ethernet1/5 Unfortunately I am running 9.1. I am hoping there are more cryptic commands available.

ChrisIsett · ‎12-06-2021

I need help finding the transceiver values in a PA-5220. In Cisco world the command is 'sh int e 1/5 transceiver details'. And it produces this output. Ethernet1/5 transceiver is present type is 10Gbase-SR name is CISCO-JDSU part number is PLRXPL-SC-S43-CS revision is 1 serial number is JUR1932GG49 nominal bitrate is 10300 MBit/sec Link length supported for 50/125um OM2 fiber is 82 m Link length supported for 62.5/125um fiber is 26 m Link length supported for 50/125um OM3 fiber is 300 m cisco id is 3 cisco extended id number is 4 cisco part number is 10-2415-03 cisco product id is SFP-10G-SR cisco vendor id is V03 SFP Detail Diagnostics Information (internal calibration) ---------------------------------------------------------------------------- Current Alarms Warnings Measurement High Low High Low ---------------------------------------------------------------------------- Temperature 29.57 C 75.00 C -5.00 C 70.00 C 0.00 C Voltage 3.30 V 3.63 V 2.97 V 3.46 V 3.13 V Current N/A 10.00 mA 2.59 mA 8.50 mA 3.00 mA Tx Power N/A 1.69 dBm -11.30 dBm -1.30 dBm -7.30 dBm Rx Power -2.74 dBm 1.99 dBm -13.97 dBm -1.00 dBm -9.91 dBm Transmit Fault Count = 0 ---------------------------------------------------------------------------- Note: ++ high-alarm; + high-warning; -- low-alarm; - low-warning Hoping there is a similar command with Palo.

ChrisIsett · ‎08-23-2021

Thanks for the command. The log is literally full of this... 2021-08-14 11:25:25 truncating integer value > 32 bits About 30 entries a minute. I checked the 2 f/w's that generate the snmpd log messages the most and they are just filled with the above message. The rest of the firewalls look normal. A quick search did not reveal any hints on what the log message means.

ChrisIsett · ‎08-16-2021

Everything is 9.1.6. Panorama and Firewalls. They are all 5220's with the exception of one pair which are 5250's. The snmp and logging configuration all gets pushed from templates. They are all basically monitored with the same set of tools. The firewalls are not under too. I have looked at the health of the firewalls in Panorama and there is no obvious spike in traffic that seems to occur at the time the log message comes out.

ChrisIsett · ‎08-13-2021

I am wondering why I see the log 'Clearing snmpd.log due to log overflow' on several of my firewalls. Out of the ~20 firewalls I manage 2 or 3 firewalls log this message on occasion. The other firewalls never log this message. I am trying to understand why this occurs on just a few firewalls. Should I be concerned about the message? What do I look for? Chris

ChrisIsett · ‎05-06-2021

I have noticed that if a create a static route via the cli the xml configuration is less than if you create the static route via the GUI. In the cli I can simply set the destination and next hop. In the GUI there are many other options (most I never use) such as path monitor, BFD, metric and so on. I essentially take the defaults. In the GUI both routes (gui and cli set) look the same. You could never tell how it was actually entered. Yet in the XML the output for the cli entered route only contains the destination and next hop. Not all the extra stuff that the gui forces you to choose. Both routes seem to be working. I am just trying to understand how the gui populates all the fields that are not described in the XML. It appears there are 'defaults' that are just assumed. Such as metric 10 for example. Below is the output from the xml. First route was entered via the gui and the 2nd route was entered via the cli using just the set commands of destination and nexthop. } Core-Network { path-monitor { enable no; failure-condition any; hold-time 2; } nexthop { ip-address 10.254.103.35; } bfd { profile None; } interface ae1.102; metric 10; destination 102.102.102.1/32; route-table { unicast; } } 64.46.210.10-32 { destination 64.46.210.10/32; nexthop { ip-address 10.254.103.35; } }

ChrisIsett · ‎04-30-2021

Thanks. Is this documented anywhere? How would I know this was an intentional change? I looked through the release notes but I did not find anything. I like the suggestion of filtering on the body of the test. I had not thought of that.

ChrisIsett · ‎04-30-2021

As I upgrade firewalls to 9.1.6 (from 8.1.x) I am noticing that the subject line for emails I receive (typically System messages) appears to be intentionally truncated. This is not display issue with outlook. If I open the email the subject line still ends in '...' The problem is I have custom email rules that filter on the subject field and now they are not matching due to the truncation. Here is a screen shot from my outlook client. You can see the 2nd message is shorter. The first message came from and 8.1.x firewall and the 2nd message came from a 9.1.6 firewall. Trust me this is not outlook truncating the display. If I open the email the subject line looks the same. Not sure what is going on here.

ChrisIsett · ‎03-10-2021

If I execute the command 'show system raid detail' on my m500 log servers I see the status of the disk pair toggling between active and clean. I am wondering why it would doe this. Is this normal? admin@LOG01> show system raid detail Disk Pair A Available Status active Disk id A1 Present model : ST2000NX0253 size : 1907729 MB status : active sync Disk id A2 Present model : ST2000NX0253 size : 1907729 MB status : active sync admin@LOG01> show system raid detail Disk Pair A Available Status clean Disk id A1 Present model : ST2000NX0253 size : 1907729 MB status : active sync Disk id A2 Present model : ST2000NX0253 size : 1907729 MB status : active sync

ChrisIsett · ‎10-06-2020

Unfortunately that is not what I am seeing. I only have about 15 hours of history yet Panorama has been up for months. I am running 9.0.6. Perhaps Panorama behaves differently than PAN-OS?

ChrisIsett · ‎10-06-2020

Does anyone know how far back the task manager log should be in Panorama? I am seeing ~60 entries that go back only about 1 day in the GUI. The show jobs all command shows even less history. Chris

ChrisIsett · ‎12-16-2019

Thanks for the ideas but it did not work out like that for me. I filtered on SSL in the session browser and the start times were all out of order. Same thing with LDAP.

ChrisIsett · ‎12-12-2019

Can anyone explain what order the session are in when viewing sessions in either the session browser or using the show session all command. For me, it is not obvious. Am I missing something?

Member Since	‎10-16-2017 11:58 AM
Date Last Visited	‎06-21-2022 10:11 AM
Posts	13
Total Likes Received	2

Online Status	Offline
Date Last Visited	‎06-21-2022 10:11 AM

About ChrisIsett

Re: How to view transceiver values on the cli

How to view transceiver values on the cli

Re: System log message Clearing snmpd.log due to log overflow

Re: System log message Clearing snmpd.log due to log overflow

System log message Clearing snmpd.log due to log overflow

Re: How to view transceiver values on the cli

Order of entries in the session browser or show session all command

Re: Creating static routes in CLI versus GUI

Re: Email subject line is truncated or shortened after upgrade to 9.1.6

Re: How to view transceiver values on the cli

How to view transceiver values on the cli

Re: System log message Clearing snmpd.log due to log overflow

Re: System log message Clearing snmpd.log due to log overflow

System log message Clearing snmpd.log due to log overflow

Creating static routes in CLI versus GUI

Re: Email subject line is truncated or shortened after upgrade to 9.1.6

Email subject line is truncated or shortened after upgrade to 9.1.6

M500 Disk Pair Raid status changes between active and clean

Re: Panorama Task Manager History

Panorama Task Manager History

Re: Order of entries in the session browser or show session all command

Order of entries in the session browser or show session all command

Network Security

Cloud Security

Security Operations

About ChrisIsett