Skip to main content

Hi Centreon Team,

Good Day!

 

I'd like to inquire about the percentage computation on PALO ALTO Firewall interfaces. We're seeing an issue with outputs surpassing 100%. Is there any way we can receive similar, if not identical, data from the NetSec team? Please see the data below.

Outputs in Centreon using the new paloalto plugin:
CRITICAL: Interface 'ethernet1/3' Packets In Error : 531313.88% (11832360 on 2227) | 'packets_discard_in'=0.00%;;;0;100 'packets_error_in'=531313.88%;0:90;0:95;0;100 'packets_discard_out'=0.00%;;;0;100 'packets_error_out'=0.00%;0:90;0:95;0;100
Interface 'ethernet1/3' Packets In Discard : 0.00% (0 on 2227), Packets In Error : 531313.88% (11832360 on 2227), Packets Out Discard : 0.00% (0 on 2094), Packets Out Error : 0.00% (0 on 2094)

Data coming from the NetSec Team:

Thank you!

Hello :)

Could you provide us with the command you used to get this output so that we can understand which Palo Alto connector you are referring to (Palo Alto firewall SSH or Palo Alto firewall SNMP)?

Kind regards


Hi Itirand,

We are using Palo Alto Firewall SNMP. Please see the command below.

/usr/lib/centreon/plugins/centreon_paloalto.pl --plugin=network::paloalto::snmp::plugin --mode=interfaces --hostname=’’ --snmp-community=’’ --snmp-version=’’ --add-errors --interface='^ethernet1/3$' --units-errors='percent_delta' --warning-in-error=90  --warning-out-error=90 --critical-in-error=95 --critical-out-error=95 --verbose --name

Thank you!
 


In this case, since it is a standard SNMP mode, I think it is the same issue that was reported in this GitHub issue. We are already working on this issue and will keep you informed when we have come up with a solution.

Kind regards