Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 352)

334 Multi-Service IronWare Security Configuration Guide
53-1003035-02
Displaying statistics from a DoS attack
9
Displaying statistics from a DoS attack
You can display statistics about ICMP and TCP SYN packets that were dropped, passed, or blocked
because burst thresholds were exceeded using the show statistics dos-attack command.
Syntax: show statistics dos-attack [| begin expression | exclude expression | include expression]
Table 55 describes this output.
Clear DoS attack statistics
To clear statistics about ICMP and TCP SYN packets, enter the clear statistics dos-attack command.
Brocade(config)# clear statistics dos-attack
Syntax: clear statistics dos-attack
TABLE 55 Output from the show statistics dos-attack command
This field... Displays...
Packet drop count Number of packets that are dropped when the port is in lockup mode.
Packet Pass Count Number of packets that are forwarded when the port is in rate-limiting mode.
Packet BLock Count Number of times the port was shut down for a traffic flow that matched the ACL.
Brocade# show statistics dos-attack
Collecting local DOS attack statistic for slot 1... Completed successfully.
Collecting local DOS attack statistic for slot 2... Completed successfully.
Collecting local DOS attack statistic for slot 3... Completed successfully.
---------------------------- Local Attack Statistics --------------------------
ICMP Drop Count ICMP Block Count SYN Drop Count SYN Block Count
3736338 188 3318293 175
---------------------------- Local Attack Statistics --------------------------
ICMP Drop Count ICMP Block Count SYN Drop Count SYN Block Count
--------------- ---------------- -------------- ---------------
0 0 0 0