Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Monitoring Suspicious Control Flow Statistics

    Purpose

    Display statistics for suspicious control flow detection. When a slot is specified, displays only information for the specific slot. If no slot is specified, displays information for all slots. The delta keyword displays statistics for the current baseline.

    Note: When you enter the show suspicious-control-flow-detection count delta command to display the baselined statistics for suspicious control flow detection, the baselining of statistics does not take effect for the Number of suspicious flows current, Number of false negatives total, and Number of false negatives current fields displayed in the output of this command. The current, active counters are displayed for these parameters, even if the baselined statistics are viewed. As a result, the values displayed for these three fields are the same as the values shown in the output of the show suspicious-control-flow-detection count command.

    Action

    To display statistics for suspicious control flow detection:

    host1(config)#show suspicious-control-flow-detection counts
    Suspicious Flow Detection System Counts
            Number of suspicious flows total: 0
            Number of suspicious flows current: 0
            Number of groups total: 0
            Number of groups current: 0
            Number of false negatives total: 0
            Number of false negatives current: 0
            Number of table overflows: 0

    Meaning

    Table 1 lists the show suspicious-control-flow-detection counts command output fields.

    Table 1: show suspicious-control-flow-detection counts Output Fields

    Field Name

    Field Description

    Number of suspicious flows total

    Total number of suspicious flows, current and past

    Number of suspicious flows current

    Number of suspicious flows currently detected and monitored

    Number of groups total

    Total number of groups, current and past

    Number of groups current

    Number of groups currently detected and monitored

    Number of false negatives total

    Total number of flows monitored that have not become suspicious (exceeded their threshold)

    Number of false negatives current

    Current number of flows monitored that have not become suspicious (exceeded their threshold)

    Number of table overflows

    Number of times a flow table overflows

    Published: 2014-08-12