Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Collaborator

Top rule hit missing...

Hi,

I would like perform a policy optimisation, and usually use the cpstat blades command to show the top rule hits.

However, not working for firewall in R80.20 with my customer... (see below an output)

Any idea about this "issue" ?

Thx !

 

[Expert@ FW:0]# cpstat blades

Packets accepted :          99216054956

Packets dropped :           42173311

Peak number of connections: 69022

Number of connections:      55147

Top Rule Hits

-----------------------

|rule index|rule count|

-----------------------

-----------------------

[Expert@ FW:0]#

 

0 Kudos
Reply
5 Replies
Champion
Champion

Is Hit Count enabled ? Are Hit Count values shown in the rule base ?

0 Kudos
Reply
Collaborator

Yes for the both 🙂

It was working before the upgrade, when FW running R77.30

0 Kudos
Reply
Champion
Champion

0 Kudos
Reply
Collaborator

Indeed, seems similar - I was not aware about this sk

But I'm running R80.20 "Note: the upgrade procedure for R80.20 and above from the version mentioned above should work normaly, without this procedure."

And working fine with SmartConsole.

 

I will proceed to analyse this script HitCountUpgrade.sh to understand if it can be help me on this topic.

0 Kudos
Reply
Champion
Champion

If Hit Count is working in the rule base, i would involve TAC !

0 Kudos
Reply