SRX

Hi Team,

We are trying to measure the session-per-second rate on an SRX setup [SRX5k with multiple SPC3s and SRX4200]. While using the command:"show security monitoring performance session"

we observed that the session count alternates up and down between consecutive seconds (e.g., T0 = X, T0+1 = X+A, T0+2 = X+A–B, and so on). On devices with multiple SPC3s, some PICs show the up–down pattern, while others show the reverse. Could you please confirm if this is expected behavior?

X@X tmp % cat  logs.txt | egrep " 0:|pic"
fpc  0  pic  0
 0:       0   1:       0   2:       0   3:       0   4:       0   5:       0
fpc  0  pic  1
 0:  2347079   1:  2307451   2:  2345332   3:  2305785   4:  2344048   5:  2305611
fpc  1  pic  0
 0:  2302232   1:  2344559   2:  2301111   3:  2343882   4:  2301477   5:  2344205
fpc  1  pic  1
 0:  2347291   1:  2303816   2:  2345996   3:  2303602   4:  2345491   5:  2302880
fpc  7  pic  0
 0:  2301624   1:  2258755   2:  2299209   3:  2257501   4:  2298225   5:  2256698
fpc  7  pic  1
 0:  2190036   1:  2230881   2:  2189274   3:  2230020   4:  2188291   5:  2228663
fpc  8  pic  0
 0:  2210587   1:  2234100   2:  2209961   3:  2233000   4:  2209666   5:  2232128
fpc  8  pic  1
 0:  2621570   1:  2656609   2:  2619873   3:  2656723   4:  2619836   5:  2656543

Additionally, when using:show security monitoring fpc X

all FPCs show the same session creation rate. Should the total session creation rate be interpreted as the sum of the rates across all FPCs?

Kindly confirm the correct way to measure session creation rate on SRX5800.

X@Xp tmp % cat  Logs.txt | egrep "FPC|96 seconds" | egrep "FPC|Tota"
FPC PIC CPU Mem        current        maximum        current        maximum
FPC 0
Total Session Creation Per Second (for last 96 seconds on average): 161683
FPC 1
Total Session Creation Per Second (for last 96 seconds on average): 161683
FPC 7
Total Session Creation Per Second (for last 96 seconds on average): 161683
FPC 8
Total Session Creation Per Second (for last 96 seconds on average): 161683

Perhaps it is related to features that are related to other devices in that it must process them. My best example is a motherboard that can process -12v and -5v. Some features in software use this. If the technology for this existed many years back, they probably exist now. As with many things in the computing world some things become more rare. I imagine it's probably part of the normal topology regardless.

https://electronics.stackexchange.com/questions/105064/what-is-the-usage-of-the-negative-voltages-on-a-pc-motherboard

An MSI K7d Master motherboard is an example. It's the base for our core processors of today. Yes,,, but that's an old mobo. Dual MP processor. Yes.

Probably is fine.

Related features example would be... like

1. Qos/cos traffic control profiles.

2. That power supply with extra rails for server operation. Is my best example.