Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 

SecureXL and CoreXL AVG Load

HeikoAnkenbrand
Champion Champion
Champion

escal123.JPG
This oneliner (see spoiler) shows you the average CPU time of all CoreXL and SecureXL instances.

 Output:
CLXL.JPG

Or use this tool for much more information on all your gateways :
Easy View Tool - View System Info for All Gateways Simultaneously

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free

Disclaimer: Check Point does not provide maintenance services or technical or customer support for third party content provided on this Site, including in CheckMates Toolbox. See also our Third Party Software Disclaimer.




9 Replies

Norbert_Bohusch
Advisor
Just tested in my lab with R80.40 und USFW and it is not working, as there is no fw_worker 😉 ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


0 Kudos

HeikoAnkenbrand
Champion Champion
Champion

Hi @Norbert_Bohusch,

Now I check if the FW works as KMFW or as UMFW!
Accordingly I check the fw_worker or the fwk0_dev process.

THX
Heiko

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Norbert_Bohusch
Advisor

Thanks Heiko, but there is still a bug 🙂

Here the output (securexl avg always 100%):

I expect mpstat is different:

 

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


HeikoAnkenbrand
Champion Champion
Champion

With the 3.10 kernel idle is on position 12 and with the 2.6 kernel on position 10.

I will modify the script again soon.

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


HeikoAnkenbrand
Champion Champion
Champion

Hi @Norbert_Bohusch ,

Now with "sar" instead of "mpstat".
Should work now.

Can you test it?

Thanks
Heiko

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Norbert_Bohusch
Advisor
Tested it and also not working. But I have found the reason as well.
sar has the following syntax:
# sar [ options ] [ <interval> [ <count> ] ]
In kernel 3.10 R80.40 it is not using your "sar -P ALL 1" as count 1, but interval 1. But this should be correct according to the way the brackets are shown. In kernel 2.6 it is taken as count and therefor works.
You can fix it by using "sar -P ALL 1 1"
;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


HeikoAnkenbrand
Champion Champion
Champion

👍 Done!

Thanks
Heiko

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


HeikoAnkenbrand
Champion Champion
Champion

I tested it:

 3.10 /2.6 kernel 

USFW and KMFW

R80.10, R80.30

;
TO ACCESS CHECKMATES TOOLBOX it's simple and free


Norbert_Bohusch
Advisor
Thanks, also working with R80.40 JHF 25 and USFW. ;
TO ACCESS CHECKMATES TOOLBOX it's simple and free