Home
  •  

Cisco PIX Firewall: Total discarded packets Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoPix.TotalDiscardedPackets.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the Total discarded packets if has changed its state.

Knowledge Base article:

Summary

Total of discarded packets is over threshold.

The total number of packets discarded is above the maximum threshold configured in Xian Network Manager 2012.

Causes

The rate of packets placed on either/both the input and output queues may exceed the rate at which the interface can be processed. Once one/both queue(s) become(s) full, the interface drops additional packets. The overflow scenario may occur due to packet outburst-bursts of packets or when the interface tries to process many packets at once.

Resolutions

Identify the source of overflow, if the current number of packets processed is consistently at or greater than 80% of the current size of either queue, it might require tuning to accommodate the packet rate. If the discarded packets count increases at a high rate, the size of the queue may require tuning to accommodate the bursts.

Additional

Monitors the total number of discarded packets detected when a device interface was receiving or sending information.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoPixFirewallSnmpInterfaceElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
Total discarded packets Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoPix.TotalDiscardedPackets.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoPixFirewallSnmpInterfaceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="TotalDiscardedPackets_AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Low</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <Algorithm>WorstOf</Algorithm>

</AggregateMonitor>