How to Interpret: show running resource-monitor
Symptom
This article is a quick reference on how to Interpret the command "show running resource-monitor"
Resolution
show running resource-monitor gives an overview of the DP CPU resources for various time intervals.
> show running resource-monitor
> day Per-day monitoring statistics
> hour Per-hour monitoring statistics
> minute Per-minute monitoring statistics
> second Per-second monitoring statistics
> week Per-week monitoring statistics
Utlization % values captured by the output are:
- CPU utlization % per function group - "CPU load sampling by group"
- CPU utlization % per core - "CPU load (%) during last"
- Session utlization %
- Packet buffer utilization %
- Packet descriptor utlization %
- Packet on-chip descriptor utilization %
Instead use debug dataplane pow performance. Refer How to interpret output of "debug dataplane pow performance" during troubleshooting high DP CPU
dp-monitor captures the output (of show running resource-monitor) in a 10minute interval. It capture the last 15 seconds and the last 15 minute values.
Sample output from PA-850 PAN-OS 10.0:
> show running resource-monitor second last 5
Resource monitoring sampling data (per second):
CPU load sampling by group:
flow_lookup : 0%
flow_fastpath : 0%
flow_slowpath : 0%
flow_forwarding : 0%
flow_mgmt : 0%
flow_ctrl : 0%
nac_result : 0%
flow_np : 0%
dfa_result : 0%
module_internal : 0%
aho_result : 0%
zip_result : 0%
pktlog_forwarding : 0%
lwm : 0%
flow_host : 0%
fpga_result : 0%
CPU load (%) during last 5 seconds:
core 0 1 2 3 4 5 6 7
* 0 0 0 0 0 * *
* 0 0 0 0 0 * *
* 0 0 0 0 0 * *
* 0 0 0 0 0 * *
* 0 0 0 0 0 * *
Resource utilization (%) during last 5 seconds:
session:
0 0 0 0 0
packet buffer:
0 0 0 0 0
packet descriptor:
0 0 0 0 0
packet descriptor (on-chip):
5 5 5 5 5
The values are printed from latest to the earliest from left to right.
The 1st entry is the utilization values for the last 1 second and the last entry is 5s prior to the first entry.
Additional Information
Each DataPlane (DP) CPU core is assigned a specific set of function groups.
View what function groups each DP CPU core is assigned: (Example output from PA-850 PAN-OS 10.0)
> show statistics | match task
task 1(pid: 4292) flow_lookup flow_fastpath flow_slowpath flow_forwarding flow_mgmt nac_result flow_np dfa_result module_internal aho_result zip_result flow_host
task 2(pid: 4287) flow_lookup flow_fastpath flow_slowpath flow_forwarding flow_ctrl nac_result flow_np dfa_result module_internal aho_result zip_result flow_host
task 3(pid: 4278) flow_lookup flow_fastpath flow_slowpath flow_forwarding nac_result flow_np dfa_result module_internal aho_result zip_result pktlog_forwarding flow_host
task 4(pid: 4279) flow_lookup flow_fastpath flow_slowpath flow_forwarding nac_result flow_np dfa_result module_internal aho_result zip_result flow_host
task 5(pid: 4286) flow_lookup flow_fastpath flow_slowpath flow_forwarding nac_result flow_np dfa_result module_internal aho_result zip_result flow_host
task X - DP CPU Core X . Example: task 1 - core 1
Useful links:
Resource List: Performance and Stability
High on-chip descriptor and packet buffer usage due to policy deny resulting in traffic latency and drops