Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
HeikoAnkenbrand
Champion
Champion

Maestro g_tcpdump performance impact?

In a Maestro environment with 100 GBit/s interfaces (uplink and downlink) and a high packet rate.

Can running g_tcpdump have a performance impact on the Maestro environment?

I think first yes, because all informations are forwarded into a ssh user session.

Can cppcap be used here as an alternative?

Is there any information on this from Check Point:
@Laszlo_Csosza @Anatoly

3 Replies
Timothy_Hall
Champion
Champion

cppcap was designed to help limit the performance impact on a firewall while taking a capture, so I'd imagine it would be preferable to tcpdump in your scenario.  But let's ask the creator of cppcap, @Aviad_Hadarian.

New 2021 IPS/AV/ABOT Self-Guided Video Series
now available at http://www.maxpowerfirewalls.com
0 Kudos
HeikoAnkenbrand
Champion
Champion

Thanks @Timothy_Hall , I am aware of the information.
I need a statement for Maestro from Check Point, which is the best way to debug connections in real time without performance impact.

 

0 Kudos
_Val_
Admin
Admin

The best way to get an official statement from Check Point is to open a TAC case or to contact your local office. 

That said, I understand that asking in the community is much more convenient 🙂

@Anatoly can you assist here?

0 Kudos