A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall. Which method shows the global counters associated with the traffic after…

Question

Options

• AFrom the CLI, issue the show counter global filter pcap yes command.
• BFrom the CLI, issue the show counter global filter packet-filter yes command.
• CFrom the GUI, select show global counters under the monitor tab.
• DFrom the CLI, issue the show counter interface command for the ingress interface.

• A
  2% (1)
• B
  82% (46)
• C
  11% (6)
• D
  5% (3)

Explanation

You can check global counters for a specific source and destination IP addresses by setting a packet filter. We recommend that you use the global counter command with a packet filter to get specific traffic outputs. These outputs will help isolate the issue between two peers. Use the following CLI command to show when traffic is passing through the Palo Alto Networks firewall from that source to destination. > show counter global filter packet-filter yes delta yes Global counters: Elapsed time since last sampling: 20.220 seconds name value rate severity category aspect description -------------------------------------------------------------------------------- pkt_recv 6387398 4 info packet pktproc Packets received pkt_recv_zero 370391 0 info packet pktproc Packets received from QoS 0 https://live.paloaltonetworks.com/t5/Management-Articles/How-to-check-global-counters-for-a- specific-source-and/ta-p/65794

No community discussion yet for this question.