topic Re: cpview -t top connections in General Topics

cpview -t top connections

imamuzic — Thu, 20 Apr 2023 16:20:56 GMT

Hello,

How I can see top connections that consumed CPUs, but not in real-time, but in history, like with 'cpview -t' or similar?

Best Regards,

Igor

Re: cpview -t top connections

the_rock — Thu, 20 Apr 2023 16:28:30 GMT

You can do cpview -t and then hit letter t again and it will ask you to input time frame, example apr 5 2023 15:00:00...then you just keep hitting + to see the history. Not sure how far it can go back, but R&D told me last year thats automatically calculated, so you can try different dates.

Andy

Re: cpview -t top connections

imamuzic — Fri, 21 Apr 2023 06:43:50 GMT

Thanks, but I already know that 🙂 What I would like to achieve is to get "Top Connections" view in history mode, but as you can see Top-Connections is empty in 'cpview -t'.

Re: cpview -t top connections

Timothy_Hall — Fri, 21 Apr 2023 12:40:30 GMT

First off, in real-time (not history mode) the "Top Connections" by Network/CPU screens of cpview will not be populated by default unless you enable them as specified in the following SK, can you currently see Top Connections in real time? sk167903: CPview Top Connections and Protocols tabs show no data If you can't see them in real time they won't be recorded for history mode.

Another related historical method you would be able to use is running fw ctl multik print_heavy_conn which will show you all identified elephant flows over the last 24 hours.

Also be aware there is a relatively new tool called top_conns that can also show top connections by CPU usage in real-time: sk172229: Top Connections Tool

Re: cpview -t top connections

imamuzic — Fri, 21 Apr 2023 13:05:18 GMT

Thank you on your reply...

Top-connections in real time cpview are already enabled (by default) since my gateways are on R81.10 and I can see them, but there is no top-connections in history (cpview -t). So, I'm not sure if this is expected behavior?

Regards,

Igor

Re: cpview -t top connections

Timothy_Hall — Fri, 21 Apr 2023 13:15:43 GMT

Hmm I can't recall if the cpview Top Connections by CPU or Bandwidth data is available in the cpview history database. My guess would be no, but let me tag the owner of cpview @Arik_Ovtracht for a clarification.

Re: cpview -t top connections

the_rock — Fri, 21 Apr 2023 13:18:39 GMT

Appears it is there.

Andy

Re: cpview -t top connections

Timothy_Hall — Fri, 21 Apr 2023 13:59:03 GMT

Yes but is there any data actually on that screen in history mode? Also what code and Jumbo level is that?

Re: cpview -t top connections

the_rock — Fri, 21 Apr 2023 14:04:33 GMT

There is data, even in R81.10 jumbo 94. One I tested is R81.20 jumbo 8.

Andy

Re: cpview -t top connections

imamuzic — Sat, 22 Apr 2023 19:32:37 GMT

Hm...I checked with another customer (R81.10 Jumbo 30) and there is also no any data from Top-Connections tab in cpview -t. The one that I reported the problem initially is currently on R81.10 Jumbo 81 (also without data)... Maybe I will update to Jumbo 94 as you confirmed that you see the data with this r81.10 Jumbo.

Re: cpview -t top connections

the_rock — Sat, 22 Apr 2023 19:54:46 GMT

You may wish to confirm with TAC, but I definitely see it working in my lab.

Re: cpview -t top connections

zoharm — Sun, 23 Apr 2023 15:44:05 GMT

"CPU -> Top connections" is not available in cpview history.
@the_rock, are you sure that you are seeing data under "CPU -> Top connections" (and not just the headlines)?

Re: cpview -t top connections

the_rock — Sun, 23 Apr 2023 16:46:45 GMT

Im pretty sure, will double check when I get home.

Re: cpview -t top connections

the_rock — Sun, 23 Apr 2023 20:13:38 GMT

Yup, apologies, it was just the headlines, I did not examine it properly beforehand, my bad.

Andy