ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

traffic Logg ISG1000 and relation to CPU load effect

11.10.09   |  
‎11-10-2009 06:16 AM

would like to know if there is any impact on the CPU load if we apply Traffic Logging on ISG1000.

 

The docs state that the max entries in the buffer for traffic log is 32K entries... what would happen if this number is reached?  i hope it will not drop any packet.

 

thanks for your replies.

4 REPLIES
ScreenOS Firewalls (NOT SRX)

Re: traffic Logg ISG1000 and relation to CPU load effect

11.10.09   |  
‎11-10-2009 10:50 AM

imadm,

 

If 32k entries is reached, the logs will be overwritten in the firewall. You can use NSM or SYSLOG to avoid losing data.

 

No packets are dropped because of this.

 

Thanks,

Cesar

ScreenOS Firewalls (NOT SRX)

Re: traffic Logg ISG1000 and relation to CPU load effect

11.11.09   |  
‎11-11-2009 12:41 AM

Thanks for your input regarding the logs.

 

My other quesion is whether the CPU or AISIC will be affected by enabling traffic logging. If so, what's te percentage of CPU utilization when traffic logging is enabled. 

 

Many thanks in advance

ScreenOS Firewalls (NOT SRX)

Re: traffic Logg ISG1000 and relation to CPU load effect

11.11.09   |  
‎11-11-2009 09:18 AM

CPU should be affected as it needs to process more information but I don't know the percentage. 

ASIC should not be affected.

Highlighted
ScreenOS Firewalls (NOT SRX)

Re: traffic Logg ISG1000 and relation to CPU load effect

11.12.09   |  
‎11-12-2009 05:17 AM

Thanks again for your contribution.

 

Do you have any idea where to find this answer about the CPU Load when traffic logging is enabled ??

 

Thanks for the last time Smiley Happy