Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Arthur_DENIS1
Collaborator

Top rule hit missing...

Hi,

I would like perform a policy optimisation, and usually use the cpstat blades command to show the top rule hits.

However, not working for firewall in R80.20 with my customer... (see below an output)

Any idea about this "issue" ?

Thx !

 

[Expert@ FW:0]# cpstat blades

Packets accepted :          99216054956

Packets dropped :           42173311

Peak number of connections: 69022

Number of connections:      55147

Top Rule Hits

-----------------------

|rule index|rule count|

-----------------------

-----------------------

[Expert@ FW:0]#

 

0 Kudos
5 Replies
G_W_Albrecht
Legend
Legend

Is Hit Count enabled ? Are Hit Count values shown in the rule base ?

0 Kudos
Arthur_DENIS1
Collaborator

Yes for the both 🙂

It was working before the upgrade, when FW running R77.30

0 Kudos
G_W_Albrecht
Legend
Legend

0 Kudos
Arthur_DENIS1
Collaborator

Indeed, seems similar - I was not aware about this sk

But I'm running R80.20 "Note: the upgrade procedure for R80.20 and above from the version mentioned above should work normaly, without this procedure."

And working fine with SmartConsole.

 

I will proceed to analyse this script HitCountUpgrade.sh to understand if it can be help me on this topic.

0 Kudos
G_W_Albrecht
Legend
Legend

If Hit Count is working in the rule base, i would involve TAC !

0 Kudos