topic Re: Top connections CPU use in Firewall and Security Management

Top connections CPU use

Sabi_Halevi — Sun, 04 Apr 2021 07:50:41 GMT

Hi all,

1.There is any way to know CPU & bandwidth usage of top connections besides cpview tool (CLI)?

2.Where I can view/change Stateful inspection timers settings via CLI?

3.There is anyway (via CLI) to know if these debugs are running? :
fw debug fwd on TDERROR_ALL_ALL=5
rad_admin rad debug on all

Thanks!

Re: Top connections CPU use

Sabi_Halevi — Sun, 04 Apr 2021 07:24:29 GMT

Also, there is any way to print cpview (cpview -p) on R80.20+ versions?
for some reason cpview -p works only on R77.30-R80.20

Re: Top connections CPU use

PhoneBoy — Sun, 04 Apr 2021 16:16:00 GMT

1. The instrumentation for this was all developed for cpview. Not aware of another tool that uses it.

2. Not sure precisely which timers you’re looking for, but I believe some of them would impact tables on the gateway. You’d see them in the headers of the various tables they impact (e.g. connections). Otherwise, they’re all global properties settings on management. It would help to know precisely what you’re trying to achieve here (ie why is dumping all the timers “interesting”).

3. Only way I know is to look at the relevant log files to see if they are increasing. There is no global “hey, I’m in debug mode” indicator beyond that.

Re: Top connections CPU use

the_rock — Sun, 04 Apr 2021 16:41:49 GMT

Agree with @PhoneBoy response. I am personally not aware of whole lots of those settings in cli. As far as debugs, I believe its very similar on other vendors too...its not easy to see exactly which debugs are turned on. For example, on Cisco asa, you can do show debug option, but it wont show you all flags turned on and its same on Fortigate as well.

Re: Top connections CPU use

Sabi_Halevi — Mon, 05 Apr 2021 15:05:00 GMT

Thanks for the info!

Re: Top connections CPU use

Timothy_Hall — Fri, 21 Apr 2023 12:38:46 GMT

There is a relatively new tool called top_conns that can show top connections by CPU usage outside of cpview: sk172229: Top Connections Tool

Re: Top connections CPU use

PhoneBoy — Fri, 21 Apr 2023 16:04:22 GMT

Didn't realize we had that, great find!

Re: Top connections CPU use

Timothy_Hall — Fri, 21 Apr 2023 16:55:02 GMT

Interesting what things you can uncover when you've read just about every SK in existence related to security gateways while performing research for classes/books. 😀

Re: Top connections CPU use

the_rock — Fri, 21 Apr 2023 18:14:33 GMT

You are 100% right!