show access-rules statistics from the CLI shows you the access rules with statistics information like Usage and Time Last Hit, couldn't find something for the address objects though.
I cannot say for sure (SNWL probably can), but I believe that happens for traffic which got discarded on the way, so the rule got hit, but no actually traffic was flowing. Like routing problems or blocked traffic on the remote side.
Usually when you see just TX packets but no RX, the remote side discarded the packages or there is a routing problem.
I checked with one NSA a minute ago, same situation like yours, but the remote side (Destination wasn't available.
Answers
Thanks a lot.
What is the meaning of a ACL with 0 bytes rx and tx but no zero usage ?
Hi @Alberto
I cannot say for sure (SNWL probably can), but I believe that happens for traffic which got discarded on the way, so the rule got hit, but no actually traffic was flowing. Like routing problems or blocked traffic on the remote side.
Usually when you see just TX packets but no RX, the remote side discarded the packages or there is a routing problem.
I checked with one NSA a minute ago, same situation like yours, but the remote side (Destination wasn't available.
--Michael@BWC