We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

Attention

Barracuda CloudGen Firewall version 8.0 is a cloud-only version. It is currently not available for on-premises deployments and can only be deployed in Microsoft Azure, Amazon Web Services, or Google Cloud Platform public clouds.

How to Monitor and Recover Statistics

  • Last updated on

On the Statistics Collection page of the Barracuda Firewall Control Center, you can view the status of statistics collection from each managed Barracuda CloudGen Firewall. If the statistics services malfunction, you can also manually get and recover lost statistics entries from this page.

View the Status of Statistics Collection

  1. Go to CONTROL > Statistics Collection.
    1. To get statistics for a specific Barracuda CloudGen Firewall, right-click the system and select Get Statistic.
    2. To recover a Barracuda CloudGen Firewall, right-click the system and select Recover.
get_stat.png

Recovery and State Analysis of Poll Sessions

Error analysis of poll sessions is displayed as follows:

Session State

Analysis of Error Scenarios

Necessary Actions

Box State

Idle

Cannot connect to box.

IGNORE

CLEAN

Connected

Cannot receive transfer files ('toSend.timestamp') from box.

IGNORE

CLEAN

State_Received

Cannot perform calculation of statistic file list.

IGNORE

CLEAN 

Received transfer files remain in box-specific state directory and will be ignored in subsequent poll sessions.

State_Processed

A dist-operation fails. No problem because these operations are transaction protected.

IGNORE

CLEAN

Data_Received

Data files either be successfully merged or are stored within temporary data directory.

RECOVERY

 
DIRTY 

Box state is dirty because a possible synchronization with the HA partner would result in inconsistent data (files in temporary data path won't be synced).

Data_Processed

masterAccept-file cannot be created.

RESEND_ACK

DIRTY 

masterAccept-file cannot be sent.

State_Updated

Cannot remove temporary data directory (because it's not empty).

INTERNAL

DIRTY

 

Cannot remove obsoleted state files.

Example - Barracuda Firewall Control Center Statistic HA Sync

When statistics files cannot be synchronized from the Barracuda Firewall Control Center to its HA partner, the following message is recorded in the mirrorstat.log file: 

  • Error ST-ML-RE0002 mirrorstat(x.x.x.x,ARGS): peer x.x.x.x also in state dirty
  • Error ST-ML-OP0010 mirrorstat(x.x.x.x,ARGS)->1: terminating abnormally, manual intervention required

The mirrorstat is a script file that is executed on a regular basis in order to process synchronization of statistics files between the Barracuda Firewall Control Center and its HA partner over an SSH connection. When the script triggers SSH connection establishment to the Barracuda Firewall Control Center HA partner, it expects the DSA key fingerprint of the HA partner to be known on the Barracuda Firewall Control Center. If the fingerprint is not yet known because an SSH connection between the two systems has never before been established, it cannot be processed any further. In this case, execute the following steps to configure the statistics files synchronization: 

  1. Initiate an SSH connection from the Barracuda Firewall Control Center to its HA partner manually, in order to make the DSA key fingerprint known. At the command line on the Barracuda Firewall Control Center, enter: 
    • ssh -lroot <HA partner IP> 
  2. Delete the synchronization status files in the /phion0/dstatm/ directory on both the primary and the secondary Barracuda CloudGen Firewall. At the command line, enter:
    • rm /phion0/dstatm/syncmsg
    • rm /phion0/dstatm/syncstate 
  3. Go to the CONTROL > Server page of the primary system and restart the dstatm service.
Last updated on