Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
How to Interpret: show running resource-monitor - Knowledge Base - Palo Alto Networks

How to Interpret: show running resource-monitor

127654
Created On 09/25/18 19:25 PM - Last Modified 06/02/21 07:23 AM


Symptom


This article is a quick reference on how to Interpret the command "show running resource-monitor"

Resolution


show running resource-monitor gives an overview of the DP CPU resources for various time intervals.

> show running resource-monitor

> day      Per-day monitoring statistics

> hour     Per-hour monitoring statistics

> minute   Per-minute monitoring statistics

> second   Per-second monitoring statistics

> week     Per-week monitoring statistics


Utlization % values captured by the output are:

  • CPU utlization % per function group - "CPU load sampling by group" 
  • CPU utlization % per core - "CPU load (%) during last"
  • Session utlization %
  • Packet buffer utilization %
  • Packet descriptor utlization %
  • Packet on-chip descriptor utilization %
Note: Values under "CPU load sampling by group:" are not useful. 
Instead use debug dataplane pow performance. Refer How to interpret output of "debug dataplane pow performance" during troubleshooting high DP CPU

dp-monitor captures the output (of show running resource-monitor) in a 10minute interval. It capture the last 15 seconds and the last 15 minute values.

Sample output  from PA-850 PAN-OS 10.0:

> show running resource-monitor second last 5

Resource monitoring sampling data (per second):

CPU load sampling by group:

flow_lookup                    :     0%

flow_fastpath                  :     0%

flow_slowpath                  :     0%

flow_forwarding                :     0%

flow_mgmt                      :     0%

flow_ctrl                      :     0%

nac_result                     :     0%

flow_np                        :     0%

dfa_result                     :     0%

module_internal                :     0%

aho_result                     :     0%

zip_result                     :     0%

pktlog_forwarding              :     0%

lwm                            :     0%

flow_host                      :     0%

fpga_result                    :     0%

CPU load (%) during last 5 seconds:

core   0   1   2   3   4   5   6   7

       *   0   0   0   0   0   *   *

       *   0   0   0   0   0   *   *

       *   0   0   0   0   0   *   *

       *   0   0   0   0   0   *   *

       *   0   0   0   0   0   *   *

Resource utilization (%) during last 5 seconds:

session:

  0   0   0   0   0 

packet buffer:

  0   0   0   0   0 

packet descriptor:

  0   0   0   0   0 

packet descriptor (on-chip):

  5   5   5   5   5 

The values are printed from latest to the earliest from left to right.
The 1st entry is the utilization values for the last 1 second and the last entry is 5s prior to the first entry.



Additional Information


Each DataPlane (DP) CPU core is assigned a specific set of function groups.
View what function groups each DP CPU core is assigned: (Example output from PA-850 PAN-OS 10.0)

> show statistics | match task

task  1(pid:   4292) flow_lookup flow_fastpath flow_slowpath flow_forwarding flow_mgmt nac_result flow_np dfa_result module_internal aho_result zip_result flow_host

task  2(pid:   4287) flow_lookup flow_fastpath flow_slowpath flow_forwarding flow_ctrl nac_result flow_np dfa_result module_internal aho_result zip_result flow_host

task  3(pid:   4278) flow_lookup flow_fastpath flow_slowpath flow_forwarding nac_result flow_np dfa_result module_internal aho_result zip_result pktlog_forwarding flow_host

task  4(pid:   4279) flow_lookup flow_fastpath flow_slowpath flow_forwarding nac_result flow_np dfa_result module_internal aho_result zip_result flow_host

task  5(pid:   4286) flow_lookup flow_fastpath flow_slowpath flow_forwarding nac_result flow_np dfa_result module_internal aho_result zip_result flow_host

task X - DP CPU Core X . Example: task 1 - core 1


Useful links:
Resource List: Performance and Stability
High on-chip descriptor and packet buffer usage due to policy deny resulting in traffic latency and drops


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXw&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language