Saturday, May 7, 2022

Palo Alto firewall - How to check interfaces traffic


Step 1. Run the following CLI command.

show system state browser

Palo Alto firewall - How to check interfaces traffic utilization_state-browser.jpg


Step 2. Press Shift + L to check the port statistics

Shift+L and press Enter on port_stats.
Since this is a PA-200 model, it shows eight ports: sys.s1.p1 ~ sys.s1.p8.

Palo Alto firewall - How to check interfaces traffic utilization_port-state.png

Palo Alto firewall - How to check interfaces traffic utilization_sysd-browser.png


Step 3. Press U and Y to enable Updates and Tracking

The information for the first 20 ports will be displayed. In order to navigate between the window, press a,s,d,w. Press U and Y to enable Updates and Tracking. You will be able to see the rx-bytes and tx-bytes stats to check the interface traffic.

U -> Updates Enabled
Y -> Tracking Enabled

Palo Alto firewall - How to check interfaces traffic utilization_SysdBrowser-s.png


Step 4 (Optional). Press Spacebar to change the port

This will bring up a node change window. You may change the port number to bring the desired port.

Palo Alto firewall - How to check interfaces traffic_EnterNode.png


Additional Help

Press p on the Sysd Browser menu to see additional help.


PSDB Help

Key Description
space/e Change sysd node with text box
a,s,d,w Navigate
n New sysd entry
del Delete current sysd entry
t Change sysd node with tree
u Toggle dynamic update, on/off
r Change update and tracking rates
y Toggle tracking on/off
Note: only changed entries are tracked
S Save current config
L Load saved config
c Set number of columns
p Display this help
-/+ Reorder

For vi users:
ctrl f Page Forward
ctrl b Page Back
h,j,k,l Navigate



No comments: