ASA/FTD Average Packet Size

[paultribe]

Is there any simple way to determine the average packet size of IP packets or Ethernet frames that are traversing interfaces on an ASA running FTD code, I know we have the packet capture tool and could probably obtain a smallish snapshot of traffic and work this out through a program like Wire Shark but I was wandering if there are any CLI commands that would be useful like on Catalyst Switches where you can run - show interface <Interface_ID> controller and you get a make up of different "frame" sizes. Any suggestions would be sincerely appreciated. Thanks in advance.

[John Bennion]

there are a few ways to find average bytes per packet.

1. you can see avg bytes/packets on the FMC in overview>summery>discovery performance.

This displays a graph that represents the average number of bytes included in each packet analyzed by the discovery process.

2. from the CLI you can use the "show traffic" command.

from here you will get numbers for the number of packets and the number of bytes dividing these two numbers will give you the average bytes per packet.

3. you can also do traffic profiling that might help.

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/configuration/guide/fpmc-config-guide-v62/traffic_profiling.html