I recently did this using the following:
1) Use an SNMP package to track the utilization of the CSS ports from the switch side
2) Use an SNMP package to track the utilization of the CSS ports from the CSS itself (should match switch side)
3) Use an SNMP package to track the number of TCP Connections on the CSS (using svcExt.mib on the CSS)
4) Manually determine the number of SSL connections using the following from the CLI
a. Clear the counters
b. Wait a period of X
c. Issue the following:
CSS11503-2(debug)# sho ssl statistics | grep conn
0 Handshake started for incoming SSL connections
0 Handshake completed for incoming SSL connections
0 Handshake started for outgoing SSL connections
0 Handshake completed for outgoing SSL connections
0 TCP connections failed
0 TCP connections established
0 TCP connections originated
0 TCP connections terminated
The SSL connections per second would be a sum of the completed SSL handshakes completed divided by the period of X.
This would give us accurate sizing information.