display firewall statistics system (All views)
Function
The display firewall statistics system command displays the statistics on the system.
The display firewall statistics system increased command displays the incremental statistics from the last time execution.
Format
display firewall statistics system { brief | discard | received | table | transmitted } [ slot slot-id cpu cpu-id ] [ all ]
display firewall statistics system increased
Parameters
| Parameter | Description | Value |
|---|---|---|
brief |
Indicate the brief format. |
- |
discard |
Indicates the discarded packets statistics information. |
- |
received |
Indicates the received packets statistics information. |
- |
table |
Indicates the table packets statistics information. |
- |
transmitted |
Indicates the transmitted packets statistics information. |
- |
increased |
Indicates the incremental statistics from the last time execution. |
- |
slot slot-id |
Indicates the slot number. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter. |
- |
cpu cpu-id |
Indicates the CPU ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter. |
- |
all |
Indicates all information. If all is not configured, only those statistics items whose value are not 0 are displayed. |
- |
Usage Guidelines
The statistics displayed using the display firewall statistics system increased command for the first time are incremental statistics, namely, current system statistics.
Example
# Display the discard information of statistics.
<sysname> display firewall statistics system discard
Discard statistic information:
TCP session miss packets discarded:5
ARP miss packets discarded:3
L3 other eth type packets discarded:864
Multicast filter packets discarded:1882
Tcp option timestamp packets discarded:1
IPv4 frag reach threshold weight packets discarded:100
If the value of a packet discard statistical item is 0, this item is not displayed.
Table 1 shows the description of the display firewall statistics system discard command output.
Item |
Description |
|---|---|
Discard statistic information |
Total number of discarded packets |
TCP session miss packets discarded |
Number of discarded TCP packets |
ARP miss packets discarded |
Number of discarded packets due to failure in finding corresponding ARP entries |
L3 other eth type packets discarded |
Number of discarded packets whose Ethernet types are not supported on Layer-3 interfaces |
Multicast filter packets discarded |
Number of discarded Layer-2 multicast packets due to packet filtering |
Tcp option timestamp packets discarded |
Number of discarded TCP packets with the Options field set to timestamp |
IPv4 frag reach threshold weight packets discarded |
Number of cached IPv4 fragments discarded due to exceeding the weight threshold |
# Display the brief information of statistics.
<sysname> display firewall statistics system brief all
System statistic brief information:
Total IPV4 packets transmitted:139
IP packets transmitted from the local device:3
Total IP packets received:49999
IP packets received by the local device:11300
Blackhole route packets discarded:0
Fib miss packets discarded:0
Packet filter packets discarded:4171
Packet default filter packets discarded:24
ARP miss packets discarded:52
Table 2 shows the description of the display firewall statistics system brief all command output.
Item |
Description |
|---|---|
System statistic brief information |
System statistic brief information |
Total IPV4 packets transmitted |
Total number of transmitted IPv4 packets |
IP packets transmitted from the local device |
Number of packets sent from the device |
Total IP packets received |
Total number of received IP packets |
IP packets received by the local device |
Number of packets received from the device |
Blackhole route packets discarded |
Number of discarded packets for black hole route match |
Fib miss packets discarded |
Number of discarded packets due to failure in finding corresponding routes |
Packet filter packets discarded |
Number of discarded packets by packet filtering |
Packet default filter packets discarded |
Number of discarded packets by default packet filtering |
ARP miss packets discarded |
Number of discarded packets due to failure in finding corresponding ARP entries |
# Display statistics on transmitted packets.
<sysname> display firewall statistics system transmitted all
Transmited statistic information:
Total packets transmitted:12154
Total packets byte transmitted:997951
Total IPV4 packets transmitted:11867
Total IPV6 packets transmitted:0
IP packets transmitted from the local device:11867
Fragment packets transmitted:0
TCP packets transmitted:10542
UDP packets transmitted:1043
ICMP packets transmitted:282
Other IP packets transmitted:0
Table 3 shows the description of the display firewall statistics system transmitted all command output.
Item |
Description |
|---|---|
Total packets transmitted |
Total number of transmitted packets |
Total IP packets transmitted |
Total number of transmitted IP packets |
IP packets transmitted from the local device |
Number of packets sent from the device |
Forward IP packets transmitted |
Number of forwarded IP packets (excluding the packets initiated by the device) |
Fragment packets transmitted |
Number of forwarded fragments |
TCP packets transmitted |
Number of forwarded TCP packets |
UDP packets transmitted |
Number of forwarded UDP packets |
ICMP packets transmitted |
Number of forwarded ICMP packets |
Other IP packets transmitted |
Number of forwarded non-ICMP, non-TCP, and non-UDP packets |
<sysname> display firewall statistics system increased
The last check time is: 2015/2/11 9:30:50
The current system time is: 2015/2/11 9:31:34
IP Increased Statistic:
-------------------------------------------------------------------------------------------------------------
Packets Increased
Input Packets:
sum 137889 141
local 137882 141
bad protocol 0 0
bad format 0 0
bad checksum 0 0
bad options 0 0
TTL exceeded 0 0
Output Packets:
forwarding 0 0
local 440444 219
dropped 0 0
no route 51 0
Fragment Packets:
input 0 0
output 0 0
dropped 0 0
fragmented 0 0
couldn't fragment 0 0
Reassembling Packets:
sum 0 0
timeouts 0 0
------------------------------------------------------------------------------------------------------------
System Discard Increased Statistic:
-------------------------------------------------------------------------------------------------------------
Packets discarded statistics Packets Increased
Total packets discarded: 32299 44
Unknown frame check packets discarded: 3288 9
ARP miss packets discarded: 27457 35
Session miss packets discarded: 49 0
Policy filter deny packets discarded: 1134 0
-------------------------------------------------------------------------------------------------------------
Interface Increased statistic:
-------------------------------------------------------------------------------------------------------------
Interface Mode InBytes/OutBytes InPackets/OutPackets InErrors/OutErrors InUti
In/Out(Bytes/Sec) In/Out(Packets/Sec) OutUti
GigabitEthernet0/0/0 Full 30510/21949 233/227 0/0 0.01%
693/498 5/5 0.01%
GigabitEthernet0/0/0 Full 0/0 0/0 0/0 0%
0/0 0/0 0%
GigabitEthernet0/0/1 Full 0/0 0/0 0/0 0%
0/0 0/0 0%
GigabitEthernet0/0/2 Full 0/0 0/0 0/0 0%
0/0 0/0 0%
GigabitEthernet0/0/3 Full 0/0 0/0 0/0 0%
0/0 0/0 0%
GigabitEthernet0/0/4 Full 0/0 0/0 0/0 0%
0/0 0/0 0%
GigabitEthernet0/0/5 Full 384/0 6/0 0/0 0.01%
8/0 0/0 0%
-------------------------------------------------------------------------------------------------------------
The statistical items are the same as those for packet discard statistics. If the value of a packet discard statistical item is 0, this item is not displayed.
Item |
Description |
|---|---|
Packets |
Number of packets. |
Increased |
Number of incremental packets. |
IP Increased Statistic |
Statistics on incremental IP packets. |
Input Packets |
Number of received packets. |
sum |
Total number of received packets. |
local |
Number of received packets destined for the local device. |
bad protocol |
Number of unknown protocol packets. |
bad format |
Number of packets in incorrect formats. |
bad checksum |
Number of packets with incorrect checksum. |
bad options |
Number of packets in incorrect options. |
TTL exceeded |
Number of packets discarded due to TTL timeout. |
Output Packets |
Number of sent packets. |
forwarding |
Number of forwarded packets. |
local |
Number of packets sent by the local device. |
dropped |
Number of discarded packets. |
no route |
Number of packets for which no route is found. |
Fragment Packets |
Number of fragmented packets. |
input |
Number of received fragmented packets. |
output |
Number of sent fragment packets. |
dropped |
Number of discarded fragmented packets. |
fragmented |
Number of successfully fragmented packets. |
couldn't fragment |
Number of packets that cannot be fragmented. |
Reassembling Packets |
Number of successfully reassembled packets. |
sum |
Total number of reassembled packets. |
timeouts |
Number of packets for which fragmentation times out. |
System Discard Increased Statistic |
Incremental statistics on discarded packets. |
Packets discarded statistics |
Statistics on discarded packets. |
Total packets discarded |
Total number of discarded packets. |
Unknown frame check packets discarded |
Number of packets discarded due to frame parsing errors. |
ARP miss packets discarded |
Number of packets discarded due to failure in finding corresponding ARP entries. |
Session miss packets discarded |
Number of packets discarded due to session table mismatch. |
Policy filter deny packets discarded |
Number of packets discarded due to packet filtering. |
Interface Increased Statistic |
Interface incremental statistics.
NOTE:
Only incremental statistics on physical interfaces are displayed. |
Interface |
Interface name. |
Mode |
Interface working mode:
|
InBytes |
Number of incrementally received bytes |
OutBytes |
Number of incrementally sent bytes. |
In/Out(Bytes/Sec) |
Incremental receiving/sending byte rate. |
InPackets |
Number of incrementally received packets. |
OutPackets |
Number of incrementally sent packets. |
In/Out(Packets/Sec) |
Incremental receiving/sending packet rate. |
InErrors |
Number of incrementally received error and discarded packets. |
OutErrors |
Number of incrementally sent error packets. |
InUti |
Average bandwidth usage within the last 300 seconds in the inbound direction of an interface. The value is the average rate of the inbound direction of the interface within 300 seconds divided by the interface bandwidth. If the value is smaller than 0.01% and the interface has traffic, 0.01% is displayed. If the interface bandwidth is narrowed (for example, the bandwidth of an Ethernet interface is adjusted using the speed command) but communication traffic is not immediately adjusted, the bandwidth usage may become 100%. -- indicates that this type of interface does not support the display of bandwidth usage. |
OutUti |
Average bandwidth usage within the last 300 seconds in the outbound direction of an interface. The value is the average rate of the outbound direction of the interface within 300 seconds divided by the interface bandwidth. If the value is smaller than 0.01% and the interface has traffic, 0.01% is displayed. If the interface bandwidth is narrowed (for example, the bandwidth of an Ethernet interface is adjusted using the speed command) but communication traffic is not immediately adjusted, the bandwidth usage may become 100%. -- indicates that this type of interface does not support the display of bandwidth usage. |