beautypg.com

Displaying server traffic information – Brocade Virtual ADX Security Guide (Supporting ADX v03.1.00) User Manual

Page 96

background image

84

Brocade Virtual ADX Security Guide

53-1003250-01

Configuring Syn-Proxy

5

Displaying Server Traffic information

The show server traffic command displays four counters that help to analyze incoming traffic and
determine the DOS attack occurrence. Be sure to issue show Layer 4 traffic from the SSM CPU (not
the MP).

Syntax: show server traffic

TABLE 7

Field Descriptions for show Layer 4 traffic

Field

Description

last conn rate

Rate of TCP traffic per second. This includes all TCP traffic, including TCP SYN DoS
attacks

max conn rate

Peak rate of TCP traffic (per second) encountered on this device.

last TCP attack rate

Rate of TCP Dos attacks per second. This rate is delayed by 1 to 2 minutes.

max TCP attack rate

Peak rate of TCP DoS attacks (per second) encountered on this device. This rate is
delayed by 1 to 2 minutes.

Virtual ADX#show server traffic

Client->Server = 3760614467 Server->Client = 2169558899

Drops = 0 Aged = 17568293

Fw_drops = 0 Rev_drops = 0

FIN_or_RST = 169210866 old-conn = 0

Disable_drop = 0 Exceed_drop = 0

Stale_drop = 9 Unsuccessful = 0

SYN def/proxy RST = 0 Server Resets = 0

Out of Memory = 0 Out of Memory = 0

last conn rate = 0 max conn rate = 16283

last TCP attack rate = 0 max TCP attack rate = 0

fast vport found = 0 fast vport n found = 477

Fwd to non-static FI = 0 Dup stale SYN = 0

TCP forward FIN = 0 TCP reverse FIN = 0

Fast path FWD FIN = 0 Fast path REV FIN = 0

Fast path SLB SYN = 0 Dup SYN after FIN = 0

Duplicate SYN = 0 Duplicate sessions = 0

TCP ttl FIN recvd = 0 TCP ttl reset recvd = 0

Sessions in DEL_Q = 0 Sess force deleted = 0

Fwd sess not found = 0 sess already in delQ = 0

Sess rmvd from delQ = 0

New sess sync sent = 0 New sess sync recvd = 0

TCP SYN received = 0 TCP SYN dropped = 0

TCP SYN to MP = 0 TCP SYN ACK to MP = 0

TCP SYN ACK received = 0 TCP SYN ACK dropped = 0

TCP pkt received = 0 TCP pkt dropped = 0

TCP pkt to MP = 0

Dropped VIP pings = 0