topic Re: Traffic rate on ASA interface in Network Security

Traffic rate on ASA interface

Harmeet Singh — Fri, 21 Feb 2020 15:02:30 GMT

Hi,

I have ASA directly connected with Nexus switch. When i see the traffic rate at both side on directly connected interfaces, there is a major difference.

NEXUS-9K# sh interface eth1/41 | in rate
30 seconds input rate 270831600 bits/sec, 91518 packets/sec
30 seconds output rate 346781120 bits/sec, 108579 packets/sec
input rate 222.57 Mbps, 86.92 Kpps; output rate 294.91 Mbps, 104.57 Kpps

===========================================================

ASA/pri/act# sh traffic | be GigabitEthernet1/0
GigabitEthernet1/0:
received (in 121558.940 secs):
10204132362 packets 4832562247598 bytes
83025 pkts/sec 39754006 bytes/sec
transmitted (in 121558.940 secs):
10161020592 packets 4799025735816 bytes
83023 pkts/sec 39479002 bytes/sec
1 minute input rate 1 pkts/sec, 599 bytes/sec
1 minute output rate 1 pkts/sec, 599 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 113 bytes/sec
5 minute output rate 0 pkts/sec, 112 bytes/sec
5 minute drop rate, 0 pkts/sec

Any reason behind it?

Re: Traffic rate on ASA interface

Marius Gunnerud — Thu, 28 Dec 2017 07:45:01 GMT

Is there traffic flowing over these links? This looks like a bug behavior to me. Have you checked the release notes for the ASA version you are running?

Re: Traffic rate on ASA interface

Harmeet Singh — Thu, 28 Dec 2017 09:11:09 GMT

Hi Marius,

Yes, Currently the connection count is 59523.

This ASA is in context mode and traffic is showing correct amount on interface when I am checking in context. But in system it not showing correct on that same interface.

Production-ASA/pri/act# sh traffic | b Production
Production-Zone
received (in 4067524.550 secs):
9129711292 packets 3727628143188 bytes
2000 pkts/sec 916000 bytes/sec
transmitted (in 4067524.550 secs):
11210585997 packets 3994518776132 bytes
2000 pkts/sec 982000 bytes/sec
1 minute input rate 1525 pkts/sec, 394238 bytes/sec
1 minute output rate 2720 pkts/sec, 755768 bytes/sec
1 minute drop rate, 2 pkts/sec
5 minute input rate 1687 pkts/sec, 579118 bytes/sec
5 minute output rate 2864 pkts/sec, 888198 bytes/sec
5 minute drop rate, 2 pkts/sec
5 minute drop rate, 0 pkts/sec
==============================================================

Production-ASA/pri/act# sh running-config interface gi1/2
!
interface GigabitEthernet1/2
nameif Production-Zone
security-level 98
==============================================================

ASA/pri/act# sh traffic | b GigabitEthernet1/2
GigabitEthernet1/2:
received (in 176564.320 secs):
218881876 packets 70553789163 bytes
1020 pkts/sec 399008 bytes/sec
transmitted (in 176564.320 secs):
385349430 packets 133369906343 bytes
2012 pkts/sec 755021 bytes/sec
1 minute input rate 0 pkts/sec, 7 bytes/sec
1 minute output rate 0 pkts/sec, 1 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 0 pkts/sec, 0 bytes/sec
5 minute output rate 0 pkts/sec, 1 bytes/sec
5 minute drop rate, 0 pkts/sec

Current version is asa963-1.

Re: Traffic rate on ASA interface

Marius Gunnerud — Thu, 28 Dec 2017 09:23:50 GMT

To me this looks like a bug. I have not been able to find any bug related to this yet though. I would suggest opening a TAC case for this. It could be a new bug.