display traffic-policy statistic

Function

The display traffic-policy statistic command displays traffic policy rule statistics.

Format

display traffic-policy statistic { bandwidth | connection-limit | connection-rate-limit } { per-ip [ ip-address ip-address ] | per-user [ user user-name ] | whole } { upstream | downstream | both } { rule rule-name | all } [ exceed { limit | value } | slot slot-id cpu cpu-id ]

display traffic-policy statistic bandwidth vsys vsys-name

display traffic-policy statistic { bandwidth | connection-limit } { per-ip | per-user | whole } { upstream | downstream | both } top10

Parameters

Parameter	Description	Value
bandwidth	Displays traffic policy statistics.	-
connection-limit	Displays connection limit statistics.	-
connection-rate-limit	Displays new connection rate limit statistics.	-
per-ip	Displays per-IP-address statistics.	-
ip-address ip-address	Specifies an IPv4 or IPv6 address.	An IPv4 address is in dotted decimal notation, and an IPv6 address is in hexadecimal notation.
per-user	Displays per-user statistics.	-
user user-name	Specifies the name of a user.	The user must already exist.
whole	Indicates all statistics.	-
upstream	Indicates the upstream bandwidth.	-
downstream	Indicates the downstream bandwidth.	-
both	Displays the total upstream and downstream bandwidth, number of connections, and new connection rate statistics. Only the USG6610E/6620E, USG6630E/6650E, USG6680E and USG6712E/6716E support the display of the total upstream and downstream bandwidth statistics.	-
rule rule-name	Displays statistics on the specified traffic policy rule.	The traffic policy rule must already exist.
all	Displays statistics on all traffic policy rules.	-
vsys vsys-name	Displays statistics of the specified virtual system.	The virtual system must already exist.
top10	Indicates top 10 in statistics.	-
exceed limit	Indicates entries that exceed the maximum value of the bandwidth, connection number, or new connection rate. NOTE: The limit value is determined by bandwidth, connection-limit, and connection-rate-limit. When being used with bandwidth, limit indicates the limit on the bandwidth. When being used with connection-limit, limit indicates the limit on the number of connections. When being used with connection-rate-limit, limit indicates the limit on the new session rate.	-
exceed value	Displays entries that exceed a specified value of the bandwidth, connection number, or new connection rate. NOTE: value is determined by bandwidth, connection-limit, connection-rate-limit. When value is used with bandwidth, entries whose bandwidth exceeds value are displayed (the bandwidth of received packets is compared with value). When value is used with connection-limit, entries whose number of connections exceeds value are displayed (the number of established connections is compared with value). When value is used with connection-rate-limit, entries whose new session rate exceeds value are displayed (the number of connections established per second currently is compared with value).	The value is integer. When value indicates bandwidth, the unit is kbit/s. When value indicates the number of connections, the value is the number of connections. When value indicates the new session rate, the unit is the number of sessions per second.
slot slot-id	Specifies the slot ID of the SPU. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-
cpu cpu-id	Specifies the CPU ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

In the forwarding process of bandwidth management, per-IP traffic limiting and statistics take precedence over global traffic limiting and statistics. Therefore, if both per-IP traffic limiting and global traffic limiting are configured, the sum of bandwidth statistics of each IP address may be different from the actual outbound interface bandwidth statistics.

Example

# Display statistics on traffic policy rule traffic_rule.

<sysname> display traffic-policy statistic bandwidth whole upstream rule traffic_rule
Bandwidth Statistic:                                              
Codes: PP(Passed Packets), PB(Passed Bytes), DP(Drop Packets), DB(Drop Bytes)   
------------------------------------------------------------------------------------
Policy        Profile     PP     PB    DP     DB     Rcv-Rate     Pass-Rate           
------------------------------------------------------------------------------------
traffic_rule  profile1    31941   4088448   638321   81705088   2592704   125056          
------------------------------------------------------------------------------------

**Table 1** Description of the **display traffic-policy statistic bandwidth whole upstream rule traffic_rule** command output
Item	Description
Policy	Name of the traffic policy rule
Profile	Traffic profile referenced by the traffic policy
PP	Number of forwarded packets
PB	Number of forwarded bytes
DP	Number of discarded packets
DB	Number of discarded bytes
Rcv-Rate	Number of received bytes per second before traffic limiting
Pass-Rate	Number of forwarded bytes per second after traffic limiting

# Display connection limit statistics of all traffic policy rules.

<sysname> display traffic-policy statistic connection-limit whole both all
Connection-limit Statistic:  Total current items: 1                                  
Codes: CC(Current Connection), RC(Rejective Connection)                         
--------------------------------------------------------------------------------
Policy        Profile     CC         RC                                           
--------------------------------------------------------------------------------
traffic_rule  profile1    10         57004435                                     
--------------------------------------------------------------------------------

**Table 2** Description of the **display traffic-policy statistic connection-limit whole both all** command output
Item	Description
Policy	Name of the traffic policy rule
Profile	Traffic profile referenced by the traffic policy
CC	Number of current connections
RC	Number of denied connections

# Display new connection rate limit statistics of all traffic policy rules.

<sysname> display traffic-policy statistic connection-rate-limit whole both all
Connection-rate-limit Statistic:  Total current items: 2         
Codes: CCR(Current Connection Rate), RC(Rejective Connection)                   
--------------------------------------------------------------------------------
Policy      Profile     CCR        RC                                           
--------------------------------------------------------------------------------
1           1           10         100                                          
2           1           20         200                                          
--------------------------------------------------------------------------------

**Table 3** Description of the **display traffic-policy statistic connection-rate-limit whole both all** command output
Item	Description
Policy	Name of the traffic policy rule
Profile	Traffic profile referenced by the traffic policy
CCR	Current new connection rate
RC	Number of denied connections

# Display the statistics on bandwidth policy rules whose upstream bandwidth exceeds the limit.

<sysname> display traffic-policy statistic bandwidth whole upstream all exceed limit
Bandwidth Statistic:  Total current items: 1                                            
Codes: PP(Passed Packets), PB(Passed Bytes), DP(Drop Packets), DB(Drop Bytes)   
--------------------------------------------------------------------------------------------
Policy        Profile     IP     PP     PB    DP     DB     Rcv-Rate      Pass-Rate           
--------------------------------------------------------------------------------------------
traffic_rule  profile1    1.1.1.2   336987  332269182  18727  18464822  19258  9860
--------------------------------------------------------------------------------------------

**Table 4** Description of the **display traffic-policy statistic bandwidth whole upstream all exceed limit** command output
Item	Description
Policy	Name of the traffic policy rule
Profile	Traffic profile referenced by the traffic policy
IP	Source IP address of a session
PP	Number of forwarded packets
PB	Number of forwarded bytes
DP	Number of discarded packets
DB	Number of discarded bytes
Rcv-Rate	Number of received bytes per second before traffic limiting
Pass-Rate	Number of forwarded bytes per second after traffic limiting

# Display the bandwidth statistics of virtual system vsysa.

<sysname> display traffic-policy statistic bandwidth vsys vsysa
Virtual-System Bandwidth Statistic
Codes: TP(Total Pakcets), TB(Total Bytes), PP(Passed Packets), PB(Passed Bytes), DP(Drop Packets), DB(Drop Bytes)
--------------------------------------------------------------------------------
Virtual-System      Direct       TP     TB    PP     PB    DP     DB
--------------------------------------------------------------------------------
vsysa           Entire           0       0       0       0       0       0
vsysa           Inbound          0       0       0       0       0       0
vsysa           Outbound         0       0       0       0       0       0
--------------------------------------------------------------------------------

**Table 5** Description of the **display traffic-policy statistic bandwidth vsys vsysa** command output
Item	Description
Virtual-System	Virtual system name
Direct	Traffic direction: Entire: sum of incoming and outgoing traffic Inbound: incoming traffic Outbound: outgoing traffic
TP	Total number of packets
TB	Total number of bytes
PP	Number of forwarded packets
PB	Number of forwarded bytes
DP	Number of discarded packets
DB	Number of discarded bytes