Technical Documentation

Displaying Service Session Count

Problem

You can use the command-line interface (CLI) to verify proper functioning of IDP protocol decoders without waiting for corresponding attack logs to be generated. The scio subs service detail command displays the current active and total service session counters. The counters increment when the IDP engine identifies the application.

Solution

To display the service session count:

  1. Log into the CLI as admin and enter su - to switch to root.
  2. Enter the following command to display the service session count:

    [root@defaulthost admin]# scio subs service detail s0
    Service Session Count Table:
    |  Service  |  Active  |   Total  |
    |-----------+----------+----------|
            FTP         86         86
         RLOGIN         21         21
     PORTMAPPER        100        100
           HTTP        730        730
           SMTP         38         38
           POP3         76         76
           IMAP         10         10
         TELNET         52         52
           ICMP        116        116
            DNS         50         52
            SSH          1          1
           SNMP         11         11
           DHCP         17         17
           TFTP         21         21
    

Published: 2010-01-12