- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Re: Top connections CPU use
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Top connections CPU use
Hi all,
1.There is any way to know CPU & bandwidth usage of top connections besides cpview tool (CLI)?
2.Where I can view/change Stateful inspection timers settings via CLI?
3.There is anyway (via CLI) to know if these debugs are running? :
fw debug fwd on TDERROR_ALL_ALL=5
rad_admin rad debug on all
Thanks!
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
1. The instrumentation for this was all developed for cpview. Not aware of another tool that uses it.
2. Not sure precisely which timers you’re looking for, but I believe some of them would impact tables on the gateway. You’d see them in the headers of the various tables they impact (e.g. connections). Otherwise, they’re all global properties settings on management. It would help to know precisely what you’re trying to achieve here (ie why is dumping all the timers “interesting”).
3. Only way I know is to look at the relevant log files to see if they are increasing. There is no global “hey, I’m in debug mode” indicator beyond that.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Also, there is any way to print cpview (cpview -p) on R80.20+ versions?
for some reason cpview -p works only on R77.30-R80.20
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
1. The instrumentation for this was all developed for cpview. Not aware of another tool that uses it.
2. Not sure precisely which timers you’re looking for, but I believe some of them would impact tables on the gateway. You’d see them in the headers of the various tables they impact (e.g. connections). Otherwise, they’re all global properties settings on management. It would help to know precisely what you’re trying to achieve here (ie why is dumping all the timers “interesting”).
3. Only way I know is to look at the relevant log files to see if they are increasing. There is no global “hey, I’m in debug mode” indicator beyond that.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the info!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Agree with @PhoneBoy response. I am personally not aware of whole lots of those settings in cli. As far as debugs, I believe its very similar on other vendors too...its not easy to see exactly which debugs are turned on. For example, on Cisco asa, you can do show debug option, but it wont show you all flags turned on and its same on Fortigate as well.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is a relatively new tool called top_conns that can show top connections by CPU usage outside of cpview: sk172229: Top Connections Tool
Exclusively at CPX 2025 Las Vegas Tuesday Feb 25th @ 1:00pm
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Didn't realize we had that, great find!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Interesting what things you can uncover when you've read just about every SK in existence related to security gateways while performing research for classes/books. 😀
Exclusively at CPX 2025 Las Vegas Tuesday Feb 25th @ 1:00pm
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You are 100% right!
