Monitoring Suspicious Control Flow Protocol

Purpose

Display protocol information for suspicious control flows.

Action

To display protocol information for suspicious control flows:

host1(config)#show suspicious-control-flow-detection protocol 
Protocol                       Threshold Lo-Threshold Backoff-Time
------------------------------ --------- ------------ ------------
Ppp Echo Request                      10            5          300
Ppp Echo Reply                        10            5          300
Ppp Echo Reply Fastpath               10            5          300
Ppp Control                           10            5          300
Atm Control (ILMI)                    10            5          300
Atm OAM                               10            5          300
Atm Dynamic Interface Column          10            5          300
 Creation
Atm Inverse ARP                       10            5          300
Frame Relay LMI Control               10            5          300
Frame Relay Inverse Arp               10            5          300
Pppoe Control                        512          256          300
Pppoe Config Dynamic Interface        10            5          300
 Column Creation
Ethernet ARP Miss                    128           64          300
Ethernet ARP                         128           64          300
Ethernet LACP packet                  10            5          300
Ethernet Dynamic Interface           512          256          300
 Column Creation
Slep SLARP                           128           64          300
MPLS TTL Exceeded On Receive          10            5          300
MPLS TTL Exceeded On Transmit         10            5          300
MPLS MTU Exceeded                     10            5          300
Ipsec Transport Mode L2tp           2048         1024          300
 Control
NAT/Firewall Payload                 512          256          300
NAT/Firewall Update Table            512          256          300
DHCP External                       1024          512          300
IP OSI                              2048         1024          300
IP TTL Expired                        10            5          300
IP Options Other                     512          256          300
IP Options Router Alert             2048         1024          300
IP Multicast/Broadcast Other         512          256          300
IP Multicast DHCP (SC)               512          256          300
IP Multicast Control (SC)           2048         1024          300
IP Multicast Control (IC)            512          256          300
IP Multicast VRRP                    512          256          300
IP Multicast Cache Miss              128           64          300
IP Multicast Cache Miss Auto Reply   128           64          300
IP Multicast Wrong Interface          10            5          300
IP Local DHCP (SC)                   512          256          300
IP Local Dhcp (IC)                   512          256          300
IP Local Icmp Echo                   512          256          300
IP Local Icmp Other                  128           64          300
IP Local LDP                        2048         1024          300
IP Local BGP                        2048         1024          300
IP Local OSPF                         64           32          300
IP Local RSVP                       2048         1024          300
IP Local PIM                        2048         1024          300
IP Local COPS                       2048         1024          300
IP Local L2tp Control (SC)          2048         1024          300
IP Local L2tp Control (IC)           512          256          300
IP Local Other                       512          256          300
IP Local Subscriber Interface Miss   512          256          300
IP Route To SRP Ethernet             512          256          300
IP Route No Route Exists              10            5          300
IP Normal Path MTU                    10            5          300
IP Neighbor Discovery                128           64          300
IP Neighbor Discovery Miss           128           64          300
IP Search Error                       10            5          300
IP MLD                               512          256          300
IP Local PIM Assert                  512          256          300
IP Local BFD                        1024          512          300
IP IKE                               512          256          300
IP Reassembly                       2048         1024          300
IP Local Icmp Frag                   512          256          300
IP Local Frag                        512          256          300
IP Application Classifier HTTP       128           64          300
 Redirect

Meaning

Table 106 lists the show suspicious-control-flow-detection protocol command output fields.

Table 106: show suspicious-control-flow-detection protocol Output Fields

Field Name

Field Description

Protocol

Control protocol

Threshold

Threshold in packets per second

Lo-Threshold

Low threshold in packets per second

Backoff-Time

Backoff time in seconds

Related Documentation