ASA/FTD Average Packet Size

paultribe — Thu, 03 Dec 2020 16:56:43 GMT

Is there any simple way to determine the average packet size of IP packets or Ethernet frames that are traversing interfaces on an ASA running FTD code, I know we have the packet capture tool and could probably obtain a smallish snapshot of traffic and work this out through a program like Wire Shark but I was wandering if there are any CLI commands that would be useful like on Catalyst Switches where you can run - show interface <Interface_ID> controller and you get a make up of different "frame" sizes. Any suggestions would be sincerely appreciated. Thanks in advance.

Re: ASA/FTD Average Packet Size

John Bennion — Fri, 07 Jan 2022 15:46:12 GMT

there are a few ways to find average bytes per packet.

1. you can see avg bytes/packets on the FMC in overview>summery>discovery performance.

This displays a graph that represents the average number of bytes included in each packet analyzed by the discovery process.

2. from the CLI you can use the "show traffic" command.

from here you will get numbers for the number of packets and the number of bytes dividing these two numbers will give you the average bytes per packet.

3. you can also do traffic profiling that might help.

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/traffic_profiling.html

topic Re: ASA/FTD Average Packet Size in Network Security

ASA/FTD Average Packet Size

Re: ASA/FTD Average Packet Size