display aie statistic

Function

The display aie statistic command displays statistics about the AIE.

Format

display aie statistic [ module { module-name | adapt } ] [ slot slot-id cpu cpu-id ]

Parameters

Parameter	Description	Value
module module-name	Specifies statistics about a specified module.	The value must be an existing internal module of the AIE. The options are as follows: bruteforce: brute-force cracking detection engine cc: malicious C&C flow detection engine dga: DGA domain name request detection engine eca: malicious encrypted C&C flow detection engine sql: malicious SQL injection detection engine V600R007C20SPC300 and later versions support the malicious SQL injection detection engine.
adapt	Specifies the data adaptation module of the AIE.	-

Parameter

Description

Value

module module-name

Specifies statistics about a specified module.

The value must be an existing internal module of the AIE. The options are as follows:

bruteforce: brute-force cracking detection engine
cc: malicious C&C flow detection engine
dga: DGA domain name request detection engine
eca: malicious encrypted C&C flow detection engine
sql: malicious SQL injection detection engine

V600R007C20SPC300 and later versions support the malicious SQL injection detection engine.

adapt

Specifies the data adaptation module of the AIE.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

If only the display aie statistic command is run, statistics about all modules of the AIE are displayed.

Example

# Display statistics about the AIE.

<sysname> display aie statistic
==============================================================================
AI-engine Statistics Table on slot 11 cpu 0:                                                  
==============================================================================
------------------------------------------------------------------------------
    adapt Module Statistic:                                                  
------------------------------------------------------------------------------
    Max     EPS               : 0                                            
    Current EPS               : 0                                            
 
    Total Recieved Events     : 0                                            
    Total Bypassed Events     : 0                                            
    Total Delivered Events    : 0                                            
    Total Filter Events       : 0                                            
    Total Lost Events         : 0                                            
    Total Alarm Events        : 0                                            
     --------------------------------------------------------------------------
    Filter Events Detail:                                                    
     --------------------------------------------------------------------------
    unsupported               : 0                                            
    ipv6                      : 0                                            
------------------------------------------------------------------------------
------------------------------------------------------------------------------
    bruteforce Module Statistic: 
------------------------------------------------------------------------------
    Not Running
------------------------------------------------------------------------------
------------------------------------------------------------------------------
    cc Module Statistic:                                                     
------------------------------------------------------------------------------
    Max     EPS               : 0                                            
    Current EPS               : 0                                            
 
    Total Recieved Events     : 0                                            
    Total Bypassed Events     : 0                                            
    Total Delivered Events    : 0                                            
    Total Filter Events       : 0                                            
    Total Lost Events         : 0                                            
    Total Alarm Events        : 0                                            
     --------------------------------------------------------------------------
    Filter Events Detail:                                                    
     --------------------------------------------------------------------------
    Non-TCP Protocol Events   : 0                                            
    Known Protocol Events     : 0                                            
------------------------------------------------------------------------------
------------------------------------------------------------------------------
    dga Module Statistic:                                                    
------------------------------------------------------------------------------
    Max     EPS               : 0                                            
    Current EPS               : 0                                            
 
    Total Recieved Events     : 0                                            
    Total Bypassed Events     : 0                                            
    Total Delivered Events    : 0                                            
    Total Filter Events       : 0                                            
    Total Lost Events         : 0                                            
    Total Alarm Events        : 0                                            
     --------------------------------------------------------------------------
    Filter Events Detail:                                                    
     --------------------------------------------------------------------------
    Non-UDP Protocol Events   : 0                                            
    DNS Data Empty Events     : 0                                            
    Well-known DNS Events     : 0                                            
    Multi DNS Events          : 0                                            
------------------------------------------------------------------------------
------------------------------------------------------------------------------
    eca Module Statistic:                                                    
------------------------------------------------------------------------------
    Max     EPS               : 9                                            
    Current EPS               : 0                                            
 
    Total Recieved Events     : 978                                            
    Total Bypassed Events     : 0                                            
    Total Delivered Events    : 21                                            
    Total Filter Events       : 957                                            
    Total Lost Events         : 0                                            
    Total Alarm Events        : 5                                            
     --------------------------------------------------------------------------
    Filter Events Detail:                                                    
     --------------------------------------------------------------------------
    Non-SSL Protocol Events   : 696                                            
    Unmached TCP Events       : 19                                            
    Unmached TLS Events       : 242                                            
    Duplicate Events          : 0 
    Trusted Cert Events       : 0                                           
------------------------------------------------------------------------------
------------------------------------------------------------------------------
     sql Module Statistic: 
 ------------------------------------------------------------------------------
     Not Running
 ------------------------------------------------------------------------------

**Table 1** Description of the **display aie statistic** command output
Item	Description
Max EPS (Event Per Second )	Maximum number of events per second when a module runs at a time.
Current EPS (Event Per Second )	Number of events generated for the last 1s (current performance value).
Total Recieved Events	Total number of events received by a module.
Total Bypassed Events	Total number of events that do not need to be processed by the module (such as the data that does not need to be processed because the algorithm is not enabled for the profile that the data matches).
Total Delivered Events	Number of events processed by the module actually.
Total Filter Events	Number of events that are filtered out and not processed by the module based on rules.
Total Lost Events	Number of events that are lost due to insufficient performance of the module.
Total Alarm Events	Number of alarm events generated by a module.
Filter Events Detail	Details about filtering events.
unsupported	Number of events filtered out due to invalid data format.
ipv6	Number of events filtered out due to IPv6 data.
Non-TCP Protocol Events	Number of events that are filtered out due to non-TCP protocol.
Known Protocol Events	Number of events that are filtered out due to well-known protocols.
Non-UDP Protocol Events	Number of events that are filtered out due to non-UDP protocol.
DNS Data Empty Events	Number of events that are filtered out because the DNS domain name is empty.
Well-known DNS Events	Number of events that are filtered out due to well-known DNS domain names.
Multi DNS Events	Number of events that are filtered out due to multiple DNS domain names.
Non-SSL Protocol Events	Number of events related to non-SSL protocol data.
Unmached TCP Events	Number of TCP events that do not match TLS data.
Unmached TLS Events	Number of TLS events that do not match TCP data.
Duplicate Events	Number of duplicate events.
Trusted Cert Events	Number of events that are filtered out due to trusted certificates.