Brocade TurboIron 24X Series Configuration Guide User Manual
Page 1062

1028
Brocade TurboIron 24X Series Configuration Guide
53-1003053-01
Protecting against TCP SYN attacks
Displaying statistics about packets dropped due to
DoS attacks
To display information about ICMP and TCP SYN packets dropped because burst thresholds were
exceeded,enter the following command.
Syntax: show statistics dos-attack
defines the fields in the output command.
TABLE 164
Output of show statistics dos-attack command
.
TurboIron#show statistics dos-attack
------------------------ Local Attack Statistics --------------------------------------
ICMP TCP-SYN
------------------------------ --------------------------------------------------
Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count
----------- ------------ ------------ ------------ ------------ -------------------
0 0 0 0 0 0
--------------------------Transit Attack Statistics ------------------------------------
ICMP TCP-SYN
--------------------------------------------------- -----------------------------------
Port/VE Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count
------- ------------ ------------ ------------ ------------ ------------ ------------
25 76 1754 2 0 0 0
Table 0.10:
This field..
Displays
Dropped pkts
Displays the number of packets dropped due to exceeding the configured burst-normal rate.
Blocked pkt
Displays the number of packets dropped due to exceeding the configured burst-max rate.
Lockup Count
Displays the number of times a port or VE is locked down for ICMP or TCP-SYN packets.