ScreenOS Firewalls (NOT SRX)
Reply
Visitor
imadm
Posts: 3
Registered: ‎11-10-2009
0

traffic Logg ISG1000 and relation to CPU load effect

would like to know if there is any impact on the CPU load if we apply Traffic Logging on ISG1000.

 

The docs state that the max entries in the buffer for traffic log is 32K entries... what would happen if this number is reached?  i hope it will not drop any packet.

 

thanks for your replies.

Super Contributor
Cesar
Posts: 141
Registered: ‎11-18-2008
0

Re: traffic Logg ISG1000 and relation to CPU load effect

imadm,

 

If 32k entries is reached, the logs will be overwritten in the firewall. You can use NSM or SYSLOG to avoid losing data.

 

No packets are dropped because of this.

 

Thanks,

Cesar

Visitor
imadm
Posts: 3
Registered: ‎11-10-2009
0

Re: traffic Logg ISG1000 and relation to CPU load effect

Thanks for your input regarding the logs.

 

My other quesion is whether the CPU or AISIC will be affected by enabling traffic logging. If so, what's te percentage of CPU utilization when traffic logging is enabled. 

 

Many thanks in advance

Super Contributor
Cesar
Posts: 141
Registered: ‎11-18-2008
0

Re: traffic Logg ISG1000 and relation to CPU load effect

CPU should be affected as it needs to process more information but I don't know the percentage. 

ASIC should not be affected.

Visitor
imadm
Posts: 3
Registered: ‎11-10-2009
0

Re: traffic Logg ISG1000 and relation to CPU load effect

Thanks again for your contribution.

 

Do you have any idea where to find this answer about the CPU Load when traffic logging is enabled ??

 

Thanks for the last time :smileyhappy:

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.