cpview -t top connections

[imamuzic]

Hello,

How I can see top connections that consumed CPUs, but not in real-time, but in history, like with 'cpview -t' or similar?

Best Regards,

Igor

[the_rock]

You can do cpview -t and then hit letter t again and it will ask you to input time frame, example apr 5 2023 15:00:00...then you just keep hitting + to see the history. Not sure how far it can go back, but R&D told me last year thats automatically calculated, so you can try different dates.

Andy

 

[imamuzic]

Thanks, but I already know that 🙂 What I would like to achieve is to get "Top Connections" view in history mode, but as you can see Top-Connections is empty in 'cpview -t'.

[Timothy_Hall · Accepted solution]

First off, in real-time (not history mode) the "Top Connections" by Network/CPU screens of cpview will not be populated by default unless you enable them as specified in the following SK, can you currently see Top Connections in real time?  sk167903: CPview Top Connections and Protocols tabs show no data If you can't see them in real time they won't be recorded for history mode.

Another related historical method you would be able to use is running fw ctl multik print_heavy_conn which will show you all identified elephant flows over the last 24 hours.  

Also be aware there is a relatively new tool called top_conns that can also show top connections by CPU usage in real-time: sk172229: Top Connections Tool

[imamuzic]

Thank you on your reply...

Top-connections in real time cpview are already enabled (by default) since my gateways are on R81.10 and I can see them, but there is no top-connections in history (cpview -t). So, I'm not sure if this is expected behavior?

Regards,

Igor

[Timothy_Hall]

Hmm I can't recall if the cpview Top Connections by CPU or Bandwidth data is available in the cpview history database.  My guess would be no, but let me tag the owner of cpview @Arik_Ovtracht for a clarification. 

[the_rock]

Appears it is there.

Andy

 

[Timothy_Hall]

Yes but is there any data actually on that screen in history mode?  Also what code and Jumbo level is that?

[the_rock]

There is data, even in R81.10 jumbo 94. One I tested is R81.20 jumbo 8.

Andy

[imamuzic]

Hm...I checked with another customer (R81.10 Jumbo 30) and there is also no any data from Top-Connections tab in cpview -t. The one that I reported the problem initially is currently on R81.10 Jumbo 81 (also without data)... Maybe I will update to Jumbo 94 as you confirmed that you see the data with this r81.10 Jumbo.

[the_rock]

You may wish to confirm with TAC, but I definitely see it working in my lab.

[zoharm · Accepted solution]

"CPU -> Top connections" is not available in cpview history.
@the_rock, are you sure that you are seeing data under "CPU -> Top connections" (and not just the headlines)?

[the_rock]

Im pretty sure, will double check when I get home.

[the_rock]

Yup, apologies, it was just the headlines, I did not examine it properly beforehand, my bad.

Andy