[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

show security idp counters tcp-reassembler

Syntax



show security idp counters
tcp-reassembler

Release Information

Command introduced in Release 9.2 of JUNOS software.

Description

Display the status of all TCP reassembler counter values.

This command is supported on SRX-series devices.

Required Privilege Level

view

List of Sample Output

show security idp counters tcp-reassembler

Output Fields

Table 60 lists the output fields for the show security idp counters tcp-reassembler command. Output fields are listed in the approximate order in which they appear.

Table 60: show security idp counters tcp-reassembler Output Fields

Field Name	Field Description
Bad TCP checksums (Unsupported)	Number of packets that have incorrect TCP checksums.
Bad TCP headers	Number of bad TCP headers detected.
Slow path segments	Number of segments that are sent through the slow path if the TCP segment does not pass fast-path segment validation.
Fast path segments	Number of segments that are sent through the fast path after passing a predefined TCP validation sequence.
Sequence number wrap around errors	Number of packets that wrap around of the sequence number.
Session reuses	Number of sessions that reused an already established TCP session.
SYN retransmissions	Number of SYN packets that are retransmitted.
Bad three way handshake acknowledgements	Number of packets that have incorrect three-way handshake acknowledgements (ACK packet).
Sequence number out of sync flows	Number of packets that have out-of-sync sequence numbers.
Fast path pattern matches in queued up streams	Number of queued packets that have fast path pattern match.
New segments with no overlaps with old segment	Number of new segments that do not overlap with old segment.
New segment overlaps with beginning of old segment	Number of new segments that overlap with beginning of old segment.
New segment overlaps completely with old segment	Number of new segments that overlap completely with old segment.
New segment is contained in old segment	Number of new segments contained in old segment.
New segment overlaps with end of old segment	Number of new segments that overlap with the end of old segment.
New segment begins after end of old segment	Number of new segments that overlap after the end of old segment.
Memory consumed by new segment	Memory that is consumed by the new segment.
Segments in memory	Number of segments that are stored in memory for processing.
Per-flow memory overflows	Number of segments dropped after reaching per flow memory limit.
Global memory overflows	Number of segments dropped after reaching reassembler global memory limit.
Overflow drops	Number of packets that are dropped due to memory overflow.
Copied packets (Unsupported)	Number of packets copied in reassembler.
Closed Acks	Number of Ack packets seen without having seen SYN on the same session.

show security idp counters tcp-reassembler

user@host> show
security idp counters tcp-reassembler

IDP counters:
 IDP counter type                                                      Value
 Bad TCP checksums                                                       0
 Bad TCP headers                                                         0
 Slow path segments                                                      4
 Fast path segments                                                      23
 Sequence number wrap around errors                                      0
 Session reuses                                                          0
 SYN retransmissions                                                     0
 Bad three way handshake acknowledgements                                0
 Sequence number out of sync flows                                       0
 Fast path pattern matches in queued up streams                          0
 New segments with no overlaps with old segment                          0
 New segment overlaps with beginning of old segment                      0
 New segment overlaps completely with old segment                        0
 New segment is contained in old segment                                 0
 New segment overlaps with end of old segment                            0
 New segment begins after end of old segment                             0
 Memory consumed by new segment                                          0
 Segments in memory                                                      0
 Per-flow memory overflows                                               0
 Global memory overflows                                                 0
 Overflow drops                                                          0
 Copied packets                                                          0
 Closed Acks                                                             0

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

show security idp counters tcp-reassembler

Syntax

Release Information

Description

Required Privilege Level

Related Topics

List of Sample Output

Output Fields

show security idp counters tcp-reassembler