Brocade TurboIron 24X Series Configuration Guide - Manual (Page 1062)

1028 Brocade TurboIron 24X Series Configuration Guide
53-1003053-01
Protecting against TCP SYN attacks
Displaying statistics about packets dropped due to
DoS attacks
To display information about ICMP and TCP SYN packets dropped because burst thresholds were
exceeded,enter the following command.
Syntax: show statistics dos-attack
Table 164 defines the fields in the output command.
TABLE 164 Output of show statistics dos-attack command
.
TurboIron#show statistics dos-attack
------------------------ Local Attack Statistics --------------------------------------
ICMP TCP-SYN
------------------------------ --------------------------------------------------
Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count
----------- ------------ ------------ ------------ ------------ -------------------
0 0 0 0 0 0
--------------------------Transit Attack Statistics ------------------------------------
ICMP TCP-SYN
--------------------------------------------------- -----------------------------------
Port/VE Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count
------- ------------ ------------ ------------ ------------ ------------ ------------
25 76 1754 2 0 0 0
Table 0.10:
This field.. Displays
Dropped pkts Displays the number of packets dropped due to exceeding the configured burst-normal rate.
Blocked pkt Displays the number of packets dropped due to exceeding the configured burst-max rate.
Lockup Count Displays the number of times a port or VE is locked down for ICMP or TCP-SYN packets.