display firewall flow-probe statistics

Function

The display firewall flow-probe statistics command displays statistics about metadata sent from the FW forwarding plane.

Format

display firewall flow-probe statistics [ slot slot-id ]

Parameters

Parameter	Description	Value
slot slot-id	Specifies the slot ID of the SPU. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The FW sends the collected metadata to the HiSec Insight through UDP or SSL.

In UDP mode, the FW forwarding plane directly sends the collected metadata to the HiSec Insight.

In SSL mode, the FW forwarding plane forwards the metadata to the IAE engine, and then the IAE engine sends the metadata to the HiSec Insight.

Example

# Display statistics about metadata sent from the FW forwarding plane.

<sysname> display firewall flow-probe statistics
Slot 2 Cpu 2:                                         
Firewall SSL Send Metadata to Engine               : 0
Firewall SSL Send Metadata to Engine Failed        : 0
Firewall UDP Send Metadata to CIS                  : 0
Firewall UDP Send Metadata Fragments to CIS        : 0
Firewall UDP Send Metadata Fragments to CIS Failed : 0

**Table 1** Description of the **display firewall flow-probe statistics** command output
Item	Description
Slot 2 Cpu 2	CPU 2 in slot 2
Firewall SSL Send Metadata to Engine	Volume of metadata sent by the FW forwarding plane to the IAE engine in SSL mode
Firewall SSL Send Metadata to Engine Failed	Volume of metadata that fails to be sent by the FW forwarding plane to the IAE engine in SSL mode
Firewall UDP Send Metadata to CIS	Volume of metadata sent by the FW to the HiSec Insight in UDP mode
Firewall UDP Send Metadata Fragments to CIS	Number of metadata fragments sent by the FW to the HiSec Insight in UDP mode
Firewall UDP Send Metadata Fragments to CIS Failed	Number of metadata fragments that fail to be sent by the FW to the HiSec Insight in UDP mode