[j-nsp] sessions ISG 2000

[Tim Eberhard]

Those are the number of sessions built, not the number of co-current
sessions.

To see the total number of co-current sessions you can do a "get session
info".

How is it possible that 1477066 sessions were built in an hour? Sessions are
often built and torn down very quickly, case in point DNS or HTTP. A session
is built as the initial DNS request is sent, after a reply is seen the
session is torn down. The total duration is very very quick and the session
doesn't stay in the session table very long.

Without knowing your traffic type I cannot tell you if this is normal or
high. You can use a tool to analyze your session table that I wrote that
will tell you what kind of traffic you have passing through your firewall.
The tool is called NSSA (Netscreen Session Analyzer).

Hope this clears things up,
-Tim Eberhard

On Wed, Mar 24, 2010 at 7:53 AM, Ibariouen Khalid <
ibariouen.khalid at ericsson.com> wrote:

>  Thanks for ure feed-back
>
> But how comes that I have 1477066 were built in the last hour and the
> license is limited to 500064 sessions ?
>
> Waiting for your feed-back.
>
> BR/
>
>
>  ------------------------------
>
> *From:* Tim Eberhard [mailto:xmin0s at gmail.com]
> *Sent:* mercredi 24 mars 2010 15:51
> *To:* Ibariouen Khalid
> *Cc:* juniper-nsp at puck.nether.net
> *Subject:* Re: [j-nsp] sessions ISG 2000
>
>
>
> That is the number of sessions built per second, minute and then hour.
>
> Starting off..
> Last 60 seconds:
>  0:      818  1:      711  2:      723  3:      753  4:      697  5:
>  712
>
> That is the last 60 seconds, so 818 sessions were built 1 second ago.
>
> Last 24 hours:
>  0:  1477066
>
> 1477066 were built in the last hour.
>
>
> These are permitted connections.
>
> Hope this helps,
> -Tim Eberhard
>
> On Wed, Mar 24, 2010 at 7:39 AM, Ibariouen Khalid <
> ibariouen.khalid at ericsson.com> wrote:
>
> Hi all
> Can someone tell me what's the meaning of the following output ?
>
> Is it the number of sessions ??
>
>
>
> GURGiFW:GURGiFW01(M)-> get performance session detail
> Last 60 seconds:
>  0:      818  1:      711  2:      723  3:      753  4:      697  5:
>  712
>  6:      703  7:      720  8:      706  9:      722 10:      754 11:
>  737
> 12:      810 13:      717 14:      818 15:      794 16:      711 17:
>  732
> 18:      739 19:      789 20:      712 21:      756 22:      633 23:
>  687
> 24:      704 25:      776 26:      714 27:      649 28:      720 29:
>  635
> 30:      682 31:      748 32:      773 33:      723 34:      678 35:
>  836
> 36:      760 37:      752 38:      754 39:      748 40:      829 41:
>  709
> 42:      745 43:      720 44:      624 45:      689 46:      767 47:
>  748
> 48:      703 49:      687 50:      683 51:      723 52:      758 53:
>  753
> 54:      781 55:      753 56:      748 57:      796 58:      759 59:
>  719
>
> Last 60 minutes:
>  0:    43182  1:    43062  2:    42270  3:    42092  4:    42182  5:
>  41452
>  6:    43388  7:    42766  8:    41878  9:    43618 10:    41223 11:
>  43629
> 12:    43512 13:    42015 14:    41240 15:    41713 16:    42376 17:
>  41089
> 18:    40845 19:    41254 20:    41706 21:    43379 22:    44066 23:
>  42946
> 24:    41307 25:    40752 26:    42202 27:    42116 28:    42065 29:
>  42664
> 30:    42105 31:    41580 32:    40966 33:    42879 34:    41547 35:
>  41210
> 36:    41028 37:    42219 38:    42228 39:    39627 40:    39858 41:
>  40927
> 42:    39653 43:    39048 44:    38701 45:    40059 46:    39197 47:
>  38769
> 48:    37620 49:    40328 50:    41233 51:    42655 52:    40946 53:
>  41503
> 54:    40446 55:    38491 56:    39515 57:    39991 58:    39151 59:
>  39603
>
> Last 24 hours:
>  0:  1477066  1:  2344774  2:  2073201  3:  1925822  4:  1787530  5:
>  1609260
>  6:  1383548  7:  1040609  8:   809206  9:   696466 10:   671836 11:
> 845894
> 12:  1267113 13:  1939370 14:  2627395 15:  3258609 16:  3606961 17:
>  3573903
> 18:  3318069 19:  3093698 20:  2457813 21:  2331525 22:  2296393 23:
>  2455807
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>