Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

show ddos-protection protocols violations

Syntax

show ddos-protection protocols <protocol-group> violations

Release Information

Command introduced in Junos OS Release 11.2.

Description

Display information about DDoS policer violations for all protocol groups or for a particular protocol group.

Options

none

Display information for all protocol groups.

protocol-group

(Optional) Name of a particular protocol group. See show ddos-protection protocols for a list of available groups.

Required Privilege Level

view

List of Sample Output

show ddos-protection protocols violations
show ddos-protection protocols dhcpv4 violations
show ddos-protection protocols pppoe violations

Output Fields

Table 1 lists the output fields for the show ddos-protection protocols violations command. Output fields are listed in the approximate order in which they appear.

Table 1: show ddos-protection protocols violations Output Fields

Field Name

Field Description

Number of packet types that are being violated

Number of individual policers and aggregate policers that are currently being violated

Protocol Group

Name of protocol group

Packet type

Name of packet type in protocol group

Bandwidth (pps)

Policer bandwidth

Arrival rate (pps)

Current traffic rate for packets arriving from all cards and at the Routing Engine

Peak rate (pps)

Highest traffic rate for packets arriving from all cards and at the Routing Engine

Policer bandwidth violation detected at

Timestamp of the policer violation

Detected on

Slot number of the card on which the violation was detected

Sample Output

show ddos-protection protocols violations

user@host> show ddos-protection protocols violations
Number of packet types that are being violated: 2
Protocol    Packet      Bandwidth  Arrival   Peak      Policer bandwidth
group       type        (pps)      rate(pps) rate(pps) violation detected at
pppoe       padi        500        2000      2001      2011-04-19 08:23:17 PDT
          Detected on: FPC-1
pppoe       padr        500        1999      2001      2011-04-19 08:23:17 PDT
          Detected on: FPC-1

show ddos-protection protocols dhcpv4 violations

user@host> show ddos-protection protocols dhcpv4 violations
Number of packet types that are being violated: 0

show ddos-protection protocols pppoe violations

user@host> show ddos-protection protocols pppoe violations
Number of packet types that are being violated: 2
Protocol    Packet      Bandwidth  Arrival   Peak      Policer bandwidth
group       type        (pps)      rate(pps) rate(pps) violation detected at
pppoe       padi        500        2000      2001      2011-04-19 08:23:17 PDT
          Detected on: FPC-1
pppoe       padr        500        1999      2001      2011-04-19 08:23:17 PDT
          Detected on: FPC-1

Published: 2013-07-24