Cisco Cisco Firepower Management Center 4000

Page of 1844
 
6-35
FireSIGHT System User Guide
 
Chapter 6      Managing Devices
  Clustering Devices
For troubleshooting, you should view both the messages received and the messages sent, compare 
the rate of increase, and make sure the values are close. The sent value on each peer should be 
incrementing at approximately the same rate as the received value on the opposite peer.
Contact Support if the received messages stop incrementing or increment slower than the messages 
sent by the peer.
Packets Received
The system batches multiple messages into single packets in order to decrease overhead. The 
Packets Received counter displays the total number of these data packets, as well as other control 
packets that have been received by a device.
The value should be close to the number of packets sent by the peer device. During active use, the 
values may not match, but should be close. Because the number of messages received should be 
close and incrementing at the same rate as the number of messages sent by the peer, the number of 
packets received should have the same behavior.
For troubleshooting, you should view both the packets received and the messages sent, compare the 
rate of increase, and make sure the values are increasing at the same rate. If the sent value on the 
clustered peer is incrementing, the received value on the device should also increase at the same rate.
Contact Support if the received packets stop incrementing or increment slower than the messages 
sent by the peer.
Total Bytes Received
Total bytes received are the number of bytes that make up the packets received by the peer.
The value should be close to the number of bytes sent by the other peer. During active use, the values 
may not match, but should be close. 
For troubleshooting, you should view both the total bytes received and the messages sent, compare 
the rate of increase, and make sure the values are increasing at the same rate. If the sent value on the 
clustered peer is incrementing, the received value on the device should also increase at the same rate. 
Contact Support if the received bytes stop incrementing or increment slower than the messages sent 
by the peer.
Protocol Bytes Received
Protocol bytes received are the number of bytes of protocol overhead received, which includes 
everything but the payload of session state synchronization messages.
The value should be close to the number of bytes sent by the peer. During active use, the values may 
not match, but should be close.
For troubleshooting, you should view the total bytes received to discover how much actual state data 
is being shared in comparison to protocol data. If the protocol data is a large percentage of the data 
being sent, you can adjust the minimum sync interval.
Contact Support if the protocol bytes received increment at a similar rate to the total bytes received. 
Protocol bytes received should be minimal in relation to the total bytes received.
Messages Sent
Messages sent are the number of cluster synchronization messages sent to the clustered peer. 
This data is useful in comparison to the number of messages received. During active use, the values 
may not match, but should be close. 
For troubleshooting, you should view both the messages received and the messages sent, compare 
the rate of increase, and make sure the values are close.