Monitoring Accelerated Connections with the CPView Tool

For more information about the CPView Tool, see sk101878.

Note - It can take up to 60 seconds for statistics data about the 100G Ports to accumulate before it appears in CPView.

Viewing the Traffic Rate and Concurrent Accelerated Connections

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Run:

cpview

3

From the top, click Network > Traffic.

4

In the output, refer to the rows LightSpeed.

Note - The numbers in these rows are accumulative for all installed and enabled 100G Cards and 100G Ports.

Example output (truncated):

|-------------------------------------------------------------------------------------------------------------------------
| CPVIEW.Network.Traffic                                                                                                  
|-------------------------------------------------------------------------------------------------------------------------
| Overview SysInfo Network CPU I/O Software-blades Hardware-Health Advanced                                               
|-------------------------------------------------------------------------------------------------------------------------
| Traffic Distribution Interfaces Top-Protocols Top-Connections LightSpeed-Top-Connections Templates                      
|-------------------------------------------------------------------------------------------------------------------------
| Traffic Rate:                                                                                                           
|                                                                                                                         
|              Inbound packets/sec  Outbound packets/sec      Inbound bits/sec     Outbound bits/sec       Connections/sec
| Host                           3                    13                 1,504                  105K                     0
| LightSpeed                91,097                91,097                  992M                  992M                    13
| ------------------------------------------------------------------------------------------------------------------------
| Concurrent Connections:                                                                                                 
|                                                                                                                         
|                                            Connections    Non-TCP         TCP handshake       TCP established TCP closed
| FW                                                   4          0                     0                     4          0
| Host Streaming                                       0          0                     0                     0          0
| Host SXL (including LightSpeed)                     26          0                     0                    26          0
| LightSpeed                                          26          0                     0                    26          0
| ------------------------------------------------------------------------------------------------------------------------

Viewing the Top Accelerated Connections

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Run:

cpview

3

From the top, click Network > Traffic > LightSpeed-Top-Connections.

Example output (truncated):

|------------------------------------------------------------------------------------------
| CPVIEW.Network.LightSpeed-Top-Connections                                                
|------------------------------------------------------------------------------------------
| Overview SysInfo Network CPU I/O Software-blades Hardware-Health Advanced                
|------------------------------------------------------------------------------------------
| Traffic Distribution Interfaces Top-Protocols Top-Connections LightSpeed-Top-Connections 
|------------------------------------------------------------------------------------------
| LightSpeed Connections distribution summary:                                             
|                                                                                          
| Connection                                   Protocol             Slot     Mbps       pps
| 1.1.1.100:3333 -> 2.2.2.200:22               TCP:ssh              1        0         4

Viewing the Comparison Statistics for Accelerated Connections

You can see the comparison statistics for accelerated connections in all 100G Ports.

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Run:

cpview

3

From the top, click Advanced > SecureXL > Side-by-Side.

Notes:

  • This page shows only the information for 100G Ports only for the installed 100G Cards and for built-in 100G Ports.

  • 100G Card names and the corresponding Slots:

    • "LightSpeed-1" refers to Slots 1 + 2.

    • "LightSpeed-2" refers to Slots 3 + 4.

    • "LightSpeed-3" refers to Slots 5 + 6.

    • "LightSpeed-4" refers to Slots 7 + 8.

    See Mapping of 100G Ports and Interface Names in Gaia OS.

Example output (truncated) for one installed 100G Card:

|-----------------------------------------------------------------------------------------------------------------------------
| CPVIEW.Advanced.SecureXL                                                                                                    
|-----------------------------------------------------------------------------------------------------------------------------
| Overview SysInfo Network CPU I/O Software-blades Hardware-Health Advanced                                  
|-----------------------------------------------------------------------------------------------------------------------------
| Logging CPU-Profiler Memory Network SecureXL ClusterXL CoreXL PrioQ Streaming NAT MUX Routed RAD Conn-Tracker UP HTTP-Parser
|-----------------------------------------------------------------------------------------------------------------------------
| Side-by-Side Drops Backplane Reorder-IS Network-per-CPU Offload-decision F2V-reasons LightSpeed2Host-Reasons Advanced       
|-----------------------------------------------------------------------------------------------------------------------------
| Side-by-Side                                                                          
|                                                                                       
|                                                                                       
|                   Inbound    Outbound     Inbound    Outbound      Conns/  Concurrent 
|                  pkts/sec    pkts/sec    bits/sec    bits/sec         sec       Conns 
|                                                                                       
| --------         --------    --------    --------    --------    --------    -------- 
| SND                 2,570       2,570     21,151K     21,151K           0           2 
| LightSpeed-1        2,570       2,570     21,151K     21,151K           1           2 
|                                                                                       
| Mbufs Allocated                                  43,402,672                           
| Mbufs Freed                                      43,372,162                           
|                                                                                       
|                         RTE Mbuf In Use  RTE Mbuf Available                           
| CPU Socket 0                    109,284             559,386                           
|                                                                                       
|                                                                                       
| FW cached mbufs                                           0                           
| FW cached mbufs capacity                             55,296                           
| FW cached jumbo mbufs                                     0                           
| FW cached jumbo mbufs capacity                           64                           
| Shared buffer allocated packets                           0                           
| Shared buffer allocated jumbo packets                     0

Viewing the Reasons for Non-Accelerated Traffic

You can see the reasons why traffic is not accelerated and is forwarded to the host appliance.

Step

Instructions

1

Connect to the command line on the Security Gateway.

2

Run:

cpview

3

From the top, click Advanced > SecureXL > LightSpeed2Host-Reasons.

Example output (truncated):

|----------------------------------------------------------------------------------------------------------------------
| CPVIEW.Advanced.SecureXL.LightSpeed2Host-Reasons                                                                     
|----------------------------------------------------------------------------------------------------------------------
| Overview SysInfo Network CPU I/O Software-blades Hardware-Health Advanced                                            
|----------------------------------------------------------------------------------------------------------------------
| Logging CPU-Profiler Memory Network SecureXL ClusterXL CoreXL PrioQ Streaming NAT MUX Routed RAD Conn-Tracker UP 
|----------------------------------------------------------------------------------------------------------------------
| Side-by-Side Drops Backplane Reorder-IS Network-per-CPU Offload-decision F2V-reasons LightSpeed2Host-Reasons Advanced
|----------------------------------------------------------------------------------------------------------------------
| Reasons LightSpeed accelerated packets are received by host:                                                         
|                                                                                                                      
| Reason                                     Packets                                                                   
| Invalid TCP header/packet length                 1
| Invalid UDP header/packet length                 2
| Fragmented Packet                               12