< Home

anti-ddos packet-trace debugging

Function

The anti-ddos packet-trace debugging command enables DDoS packet tracing debugging.

The undo anti-ddos packet-trace debugging command disables DDoS packet tracing debugging.

Format

anti-ddos packet-trace debugging [ acl [ ipv6 ] acl-num ]

undo anti-ddos packet-trace debugging

Parameters

Parameter Description Value
ipv6

Specifies an advanced IPv6 ACL.

-

acl-num

Specifies the number of an advanced ACL.

Packet tracing debugging is performed only on packets matching the ACL.

The value is an integer ranging from 2000 to 3999.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

By default, DDoS packet tracing debugging is disabled.

When the anti-DDoS effectiveness is poor or it has been located that the anti-DDoS processes affect normal services, you can use the DDoS packet tracing function to check the anti-DDoS processes that the packets undergo.

You are advised to configure acl to limit the packet tracing scope, which helps conserve system performance.

After you run the undo anti-ddos packet-trace debugging command to disable DDoS packet tracing debugging, the DDoS packet tracing debugging information is cleared.

Example

# Enable DDoS packet tracing debugging for packets matching ACL3001.

<sysname> anti-ddos packet-trace statistic acl 3001
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >