Top rule hit missing...

[Arthur_DENIS1]

Hi,

I would like perform a policy optimisation, and usually use the cpstat blades command to show the top rule hits.

However, not working for firewall in R80.20 with my customer... (see below an output)

Any idea about this "issue" ?

Thx !

[Expert@ FW:0]# cpstat blades

Packets accepted :          99216054956

Packets dropped :           42173311

Peak number of connections: 69022

Number of connections:      55147

Top Rule Hits

-----------------------

|rule index|rule count|

-----------------------

-----------------------

[Expert@ FW:0]#

[G_W_Albrecht]

Is Hit Count enabled ? Are Hit Count values shown in the rule base ?

[Arthur_DENIS1]

Yes for the both 🙂

It was working before the upgrade, when FW running R77.30

[G_W_Albrecht]

If you just have upgraded, it looks like sk110343: HitCountdata in R80 SmartConsole is missing afterupgradefrom R75.4X / R76 / R77.X to R80/R...

[Arthur_DENIS1]

Indeed, seems similar - I was not aware about this sk

But I'm running R80.20 "Note: the upgrade procedure for R80.20 and above from the version mentioned above should work normaly, without this procedure."

And working fine with SmartConsole.

I will proceed to analyse this script HitCountUpgrade.sh to understand if it can be help me on this topic.

[G_W_Albrecht]

If Hit Count is working in the rule base, i would involve TAC !