[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

show security idp counters flow

Syntax

show security idp counters flow

Release Information

Command introduced in Release 9.2 of JUNOS software.

Description

Display the status of all IDP flow counter values.

This command is supported on SRX-series devices.

Required Privilege Level

view

Related Topics

flow (IDP)

clear security idp counters flow

List of Sample Output

show security idp counters flow

Output Fields

Table 55 lists the output fields for the show security idp counters flow command. Output fields are listed in the approximate order in which they appear.

Table 55: show security idp counters flow Output Fields

Field Name

Field Description

Fast-path packets

Number of packets that are set through fast path after completing idp policy lookup.

Slow-path packets

Number of packet that are sent through slow path during idp policy lookup.

ICMP-error packets

(Unsupported)

Number of ICMP error packets.

Session construction failed

(Unsupported)

Number of times the packet failed to establish the session.

Session limit reached

Number of sessions that reached idp sessions limit.

Not a new session

(Unsupported)

Number of session that extended from its time limit.

Invalide index at ageout

(Unsupported)

Invalid session index in session ageout message.

Packet logging

Number of packets saved for packet logging.

Busy packets

(Unsupported)

Number of packets saved as the one or more packets of this session are handed off for async processing.

Policy cache hits

Number of sessions that matched policy cache.

Policy cache misses

Number of sessions that did not match policy cache.

Maximum flow hash collisions

Maximum number of packets of one flow that share the same hash value.

Bad-UDP-checksumpackets

(Unsupported)

Number of packets that received with bad UDP checksum error.

Gates added

Number of gate entries added for dynamic port identification.

Gate matches

(Unsupported)

Number of times a gate is matched.

Sessions deleted

Number of sessions deleted.

Sessions aged-out

(Unsupported)

Number of sessions are aged out if no traffic is received within session timeout value.

Sessions in-use while aged-out

(Unsupported)

Number of sessions in use during session ageout.

TCP flows marked dead on RST/FIN

Number of session marked dead on TCP RST/FIN.

Sessions constructed

Number of sessions established.

Sessions destructed

Number of sessions destructed.

SM Session Create

Number of SM sessions created.

SM Packet Process

Number of packets processed from SM.

SM Session close

Number of SM sessions closed.

show security idp counters flow

user@host> show security idp counters flow 
IDP counters:
 IDP counter type                                                      Value
 Fast-path packets                                                       0
 Slow-path packets                                                       1
 ICMP-error packets                                                      0
 Session construction failed                                             0
 Session limit reached                                                   0
 Not a new session                                                       0
 Invalide index at ageout                                                0
 Packet logging                                                          0
 Busy packets                                                            0
 Policy cache hits                                                       0
 Policy cache misses                                                     1
 Maximum flow hash collisions                                            0
 Flow hash collisions                                                    0
 Bad-UDP-checksum packets                                                0
 Gates added                                                             0
 Gate matches                                                            0
 Sessions deleted                                                        1
 Sessions aged-out                                                       0
 Sessoins in-use while aged-out                                          0
 TCP flows marked dead on RST/FIN                                        1
 Sessions constructed                                                    1
 Sessions destructed                                                     1
 SM Session Create                                                       1
 SM Packet Process                                                       28
 SM Session close                                                        1
[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

[an error occurred while processing this directive]