Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Monitoring SSL sessions/sec on CSS

Hello,

I have been trying to find the right parameter via CLI or SNMP to monitor the number of SSL sessions/sec. We are using CSS 11503 with a SSL module supporting in theory 800 to 1000 SSL sessions/sec and I'd like to know what the current load is. I am graphing already the flows/sec but this too generic.

Any help is appreciated.

Thanks,

Fabrice

5 REPLIES
Cisco Employee

Re: Monitoring SSL sessions/sec on CSS

Fabrice,

there might not be an exact counter for connection per seconds, but what most people do [with CSS or other devices] is capture the total number of connections every X seconds, make the difference and divide by X to get the average connection per seconds.

You could use one or combination of the following counters

CSS11503-2(debug)# sho ssl statistics | grep conn

0 Handshake started for incoming SSL connections

0 Handshake completed for incoming SSL connections

0 Handshake started for outgoing SSL connections

0 Handshake completed for outgoing SSL connections

0 TCP connections failed

0 TCP connections established

0 TCP connections originated

0 TCP connections terminated

Gilles.

New Member

Re: Monitoring SSL sessions/sec on CSS

Thanks Gilles. I will use what you suggest.

Fabrice

New Member

Re: Monitoring SSL sessions/sec on CSS

Gilles,

I am looking for the MIB entries for the counters you mentioned but had no luck so far. I parsed the CSS MIBs but basically didn't find anything that would give me values I see when doing a show ssl statistics.

Thanks

Cisco Employee

Re: Monitoring SSL sessions/sec on CSS

interestingly, this information does not exist yet in the mibs.

There is a ddts open for this

CSCek50254 - Add limited SSL MIB statistics support

Gilles.

New Member

Re: Monitoring SSL sessions/sec on CSS

Thanks for the info. I'll keep an eye on the ddts. Having the option to graph SSL stats will help us on capacity planning.

Thanks again,

Fabrice

165
Views
5
Helpful
5
Replies