How To: Check Point command to tell what traffic is on a certain CoreXL worker core

Products

• XOS

Issue/Introduction

Often times, it is helpful to understand which CoreXL worker is handling certain traffic. This is a simple How-To.n/a

Cause

A certain CPU core may be alarming for high CPU utilization (based on aggressive softIRQ usage) and you are trying to decipher what traffic is causing the CPU core to alarm.

Resolution

To use fw monitor with a specific fw core use the following command:

fw -i <fw_worker_number> monitor <enter>

Example: fw -i 1 monitor <enter>


---------------------------------------------------------------------------------------------


To see traffic that is dropped on a core specific core:

fw ctl zdebug drop | grep <fw_worker_number> <enter>
 

Example: fw ctl zdebug drop| grep fw_1 <enter>

Workaround

n/a