Brocade Multi-Service IronWare Security Configuration Guid Bedienungsanleitung PDF herunterladen (Seite 352)

334 Multi-Service IronWare Security Configuration Guide

53-1003035-02

Displaying statistics from a DoS attack

You can display statistics about ICMP and TCP SYN packets that were dropped, passed, or blocked

because burst thresholds were exceeded using the show statistics dos-attack command.

Syntax: show statistics dos-attack [| begin expression | exclude expression | include expression]

Table 55 describes this output.

Clear DoS attack statistics

To clear statistics about ICMP and TCP SYN packets, enter the clear statistics dos-attack command.

Brocade(config)# clear statistics dos-attack

Syntax: clear statistics dos-attack

TABLE 55 Output from the show statistics dos-attack command

This field... Displays...

Packet drop count Number of packets that are dropped when the port is in lockup mode.

Packet Pass Count Number of packets that are forwarded when the port is in rate-limiting mode.

Packet BLock Count Number of times the port was shut down for a traffic flow that matched the ACL.

Brocade# show statistics dos-attack

Collecting local DOS attack statistic for slot 1... Completed successfully.

Collecting local DOS attack statistic for slot 2... Completed successfully.

Collecting local DOS attack statistic for slot 3... Completed successfully.

---------------------------- Local Attack Statistics --------------------------

ICMP Drop Count ICMP Block Count SYN Drop Count SYN Block Count

3736338 188 3318293 175

---------------------------- Local Attack Statistics --------------------------

ICMP Drop Count ICMP Block Count SYN Drop Count SYN Block Count

--------------- ---------------- -------------- ---------------

0 0 0 0

1 2 ... 347 348 349 350 351 352 353 354 355 356 357 ... 369 370

Keine Kommentare

Brocade Multi-Service IronWare Security Configuration Guid Bedienungsanleitung Seite 352