Monitoring IPv6
This section explains how to set an IPv6 statistics baseline and use the show commands to view your IPv6 configuration, monitor IPv6 interfaces and statistics, and view IPv6 neighbors. Many of these show commands also contain Neighbor Discovery information.
System Event Logs
To troubleshoot and monitor IPv6, use the following system event logs:
- ipv6General—IPv6 general information
- ipv6Interface—IPv6 interface events
- ipv6ProfileMgr—IPv6 profile manager events
- ipv6RouteTable—IPv6 routing table events
- ipv6Traffic—IPv6 frame transmit and receive events
For more information about using event logs, see the JUNOSe System Event Logging Reference Guide.
Establishing a Baseline
IPv6 statistics are stored in system counters. The only way to reset the system counters is to reboot the system. You can, however, establish a baseline for IPv6 statistics by setting a group of reference counters to zero (0).
baseline ipv6
- Use to set a baseline for IPv6 statistics.
- The router implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
- Use the udp keyword to set a baseline for UDP statistics
- Use the delta keyword with IPv6 show commands to specify that baselined statistics are to be shown.
- Example
host1#baseline ipv6
baseline ipv6 interface
host1#baseline ipv6 interface atm 2/0.100
baseline tcp
- Use to set a statistics baseline for all (both IPv4 and IPv6) TCP statistics or for only IPv4 or IPv6 statistics.
- The router implements the baseline by reading and storing the statistics at the time the baseline is set and then subtracting this baseline whenever baseline-relative statistics are retrieved.
- Use the ipv6 keyword to implement a baseline for only IPv6 statistics.
- Use the delta keyword with IP show commands to specify that baselined statistics are to be shown.
- Example 1
host1#baseline tcp
host1#baseline ipv6 tcp
IPv6 show Commands
You can monitor the following aspects of IPv6 using show ipv6 commands:
You can use the output filtering feature of the show command to include or exclude lines of output based on a text string that you specify. See JUNOSe System Basics Configuration Guide, Chapter 2, Command-Line Interface, for details.
show ipv6
host1#show ipv6
Ipv6 Unicast Routing: Enabled
Default hop limit: not specified
Number of interfaces: 2
Default interface source address/mask: fe80::90:1a00:210:fd0/128
show ipv6 address
- Use to display detailed or summary information for a particular IPv6 address or interface or for all interfaces.
- The default for the show ipv6 interface command is all interface types and all interfaces.
- Use brief or detail keywords with the show ipv6 interface command to display different levels of information.
- Field descriptions
- Description—Optional description for the interface or address specified
- Network Protocols—Network protocols configured on this interface
- Link local address—Local IPv6 address of this interface
- Internet address—External address of this interface
- IPv6 statistics Rcvd:
- local destination—Frames with this router as their destination
- hdr errors—Number of packets containing header errors
- addr errors—Number of packets containing addressing errors
- unkn proto—Number of packets received containing unknown protocols
- discards—Number of discarded packets
- generated—Number of packets generated
- no routes—Number of packets that could not be routed
- discards—Number of packets that could not be routed that were discarded
- total—Total number of received packets
- errors—Error packets received
- destination unreach—Packets received with destination unreachable
- admin unreach—Packets received because the destination was administratively unreachable (for example, the packet encountered a firewall filter)
- parameter problem—Packets received with parameter errors
- time exceeded—Packets received with time-to-live exceeded
- pkt too big—Number of packet-too-big messages received that indicate a packet was too large to forward because of the allowed MTU size
- redirects—Received packet redirects
- echo requests—Echo request (ping) packets
- echo replies—Echo replies received
- rtr solicits—Number of received router solicitations
- rtr advertisements—Number of received router advertisements
- neighbor solicits—Number of received neighbor solicitations
- neighbor advertisements—Number or received neighbor advertisements
- Group membership (queries, responses, reductions)—Number of queries, responses, and reduction requests received from within a group to which the interface is assigned
- total—Total number of received packets
- errors—Error packets received
- destination unreach—Packets received with destination unreachable
- admin unreach—Packets sent because the destination was administratively unreachable (for example, due to a firewall filter)
- parameter problem—Packets received with parameter errors
- time exceeded—Packets received with time-to-live exceeded
- pkt too big—Number of packet-too-big messages sent because a received packet was too large to forward because of the allowed MTU size
- redirects—Received packet redirects
- echo requests—Echo request (ping) packets
- echo replies—Echo replies received
- rtr solicits—Number of sent router solicitations
- rtr advertisements—Number of sent router advertisements
- neighbor solicits—Number of sent neighbor solicitations
- neighbor advertisements—Number of sent neighbor advertisements
- Group membership (queries, responses, reductions)—Number of queries, responses, and reduction requests sent to a group of which the interface is assigned
- Operational MTU—Value of the MTU
- Administrative MTU—Value of the MTU if it has been administratively overridden using the configuration
- Operational speed—Speed of the interface
- Administrative speed—Value of the speed if it has been administratively overridden using the configuration
- Creation type—Method by which the interface was created (static or dynamic)
- ND reachable time—Amount of time (in milliseconds) that the neighbor is expected to remain reachable
- ND duplicate address detection attempts—Number of times that the router attempts to determine a duplicate address
- ND neighbor solicitation retransmission interval—Interval in which the router retransmits neighbor solicitations
- ND proxy—Indicates whether the router will reply to solicitations on behalf of a known neighbor
- ND RA source link layer—Indicates whether the RA includes the link layer
- ND RA interval—Interval (in seconds) of the neighbor discovery router advertisement
- ND RA lifetime—Lifetime (in seconds) of the neighbor discovery router advertisement
- ND RA managed flag—State of the neighbor discovery router advertisement managed flag
- ND RA other config flag—State of the neighbor discovery router advertisement other config flag
- ND RA advertising prefixes—Configured advertisement prefixes for neighbor discovery router advertisement
- In Received Packets, Bytes—Total number of packets and bytes received on this interface
- Unicast Packets, Bytes—Unicast packets and bytes received on the IPv6 interface; link-local received multicast packets (non-multicast-routed frames) are counted as unicast packets
- Multicast Packets, Bytes—Multicast packets and bytes received on the IPv6 interface which are then multicast-routed are counted as multicast packets
- In Policed Packets—Packets that were received and dropped because of rate limits
- In Invalid Source Address Packets—Packets received with invalid source address (for example, spoofed packets)
- In Error Packets—Number of packets received with errors
- In Discarded Packets—Packets received that were discarded for reasons other than rate limits, errors, and invalid source address
- Unicast Packets, Bytes—Unicast packets and bytes that were sent from this interface
- Multicast Routed Packets, Bytes—Multicast packets and bytes that were sent from this interface
- Out Scheduler Dropped Packets, Bytes—Number of outbound packets and bytes dropped by the scheduler
- Out Policed Packets, Bytes—Number of outbound packets and bytes dropped because of rate limits
- Out Discarded Packets—Number of outbound packets that were discarded for reasons other than those dropped by the scheduler and those dropped because of rate limits
- rate-limit-profile—Name of profile
- classifier-group entry—Entry index
- Committed—Number of packets and bytes conforming to the committed access rate
- Conformed—Number of packets and bytes that exceed the committed access rate but conform to the peak access rate
- Exceeded—Number of packets and bytes exceeding the peak access rate
- Queue length—Number of bytes in queue
- Dropped committed packets, bytes—Total number of committed packets and bytes dropped by this interface
- Dropped conformed packets, bytes—Total number of conformed packets and bytes dropped by this interface
- Dropped exceeded packets, bytes—Total number of exceeded packets and bytes dropped by this interface
host1#show ipv6 address 5:1:1::2
FastEthernet9/1.5 line protocol VlanSub is up, ipv6 is up
Description: IPv6 interface in Virtual Router Hop5
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:31ce
Internet address: 5:1:1::2/64
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
ND reachable time is 3600000 milliseconds
ND duplicate address detection attempts is 100
ND neighbor solicitation retransmission interval is 1000 milliseconds
ND proxy is enabled
ND RA source link layer is advertised
ND RA interval is 200 seconds, lifetime is 1800 seconds
ND RA managed flag is disabled, other config flag is disabled
ND RA advertising prefixes configured on interface
In Received Packets 12, Bytes 1260
Unicast Packets 5, Bytes 588
Multicast Packets 7, Bytes 672
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 21, Bytes 2352
Unicast Packets 21, Bytes 2352
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 8, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 8
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/1.5
Queue length 0 bytes
Forwarded packets 4, bytes 680
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
host1#show ipv6 address detail 5:1:1::2
FastEthernet9/1.5 line protocol VlanSub is up, ipv6 is up
Description: IPv6 interface in Virtual Router Hop5
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:31ce
Internet address: 5:1:1::2/64
IPv6 statistics:
Rcvd: 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Sent: 0 generated, 0 no routes, 0 discards
ICMPv6 statistics:
Rcvd: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
3 echo replies
Sent: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 5 echo requests
0 echo replies
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
ND reachable time is 3600000 milliseconds
ND duplicate address detection attempts is 100
ND neighbor solicitation retransmission interval is 1000 milliseconds
ND proxy is enabled
ND RA source link layer is advertised
ND RA interval is 200 seconds, lifetime is 1800 seconds
ND RA managed flag is disabled, other config flag is disabled
ND RA advertising prefixes configured on interface
ICMPv6 statistics:
Rcvd: 12 total, 0 errors
0 rtr solicits, 7 rtr advertisements
1 neighbor solicits, 1 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
Sent: 31 total, 0 errors
0 rtr solicits, 16 rtr advertisements
5 neighbor solicits, 5 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
In Received Packets 12, Bytes 1260
Unicast Packets 5, Bytes 588
Multicast Packets 7, Bytes 672
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 22, Bytes 2480
Unicast Packets 22, Bytes 2480
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 8, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 8
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/1.5
Queue length 0 bytes
Forwarded packets 4, bytes 680
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
host1#show ipv6 interface
null0 line protocol IpLoopback is up, ipv6 is up
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:1d44
Unnumbered Interface: Corresponding Numbered Interface not specified or
removed
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
Neighbor Discovery is disabled
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 0, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 0
FastEthernet9/1.5 line protocol VlanSub is up, ipv6 is up
Description: IPv6 interface in Virtual Router Hop5
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:31ce
Internet address: 5:1:1::2/64
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
ND reachable time is 3600000 milliseconds
ND duplicate address detection attempts is 100
ND neighbor solicitation retransmission interval is 1000 milliseconds
ND proxy is enabled
In Received Packets 13, Bytes 1356
Unicast Packets 5, Bytes 588
Multicast Packets 8, Bytes 768
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 22, Bytes 2480
Unicast Packets 22, Bytes 2480
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 8, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 8
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/1.5
Queue length 0 bytes
Forwarded packets 4, bytes 680
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
FastEthernet9/0.6 line protocol VlanSub is up, ipv6 is up
Description: IPv6 interface in Virtual Router Hop6
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:31cd
Internet address: 6:1:1::1/64
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
ND reachable time is 3600000 milliseconds
ND duplicate address detection attempts is 100
ND neighbor solicitation retransmission interval is 1000 milliseconds
ND proxy is enabled
ND RA source link layer is advertised
ND RA interval is 200 seconds, lifetime is 1800 seconds
ND RA managed flag is disabled, other config flag is disabled
ND RA advertising prefixes configured on interface
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 8, Bytes 768
Unicast Packets 8, Bytes 768
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 5, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 5
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/0.6
Queue length 0 bytes
Forwarded packets 0, bytes 0
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
loopback5 line protocol IpLoopback is up, ipv6 is up
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:1d44
Internet address: 10:1:1:0:290:1aff:fe40:1d44/64 (eui-64)
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
Neighbor Discovery is disabled
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 0, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 0
IPv6 policy input ipv6InPol25
rate-limit-profile Rlp2Mb classifier-group clgA entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile Rlp8Mb
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
IPv6 policy output ipv6PolOut2
rate-limit-profile RlpOutA classifier-group clgB entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile RlpOutB
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
IPv6 policy local-input ipv6PolLocIn5
rate-limit-profile Rlp1Mb classifier-group clgC entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile Rlp5Mb
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/0.6
Queue length 0 bytes
Forwarded packets 0, bytes 0
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
host1#show ipv6 interface FastEthernet 9/0.6
FastEthernet9/0.6 line protocol VlanSub is up, ipv6 is up
Description: IPv6 interface in Virtual Router Hop6
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:31cd
Internet address: 6:1:1::1/64
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
ND reachable time is 3600000 milliseconds
ND duplicate address detection attempts is 100
ND neighbor solicitation retransmission interval is 1000 milliseconds
ND proxy is enabled
ND RA source link layer is advertised
ND RA interval is 200 seconds, lifetime is 1800 seconds
ND RA managed flag is disabled, other config flag is disabled
ND RA advertising prefixes configured on interface
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 8, Bytes 768
Unicast Packets 8, Bytes 768
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 5, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 5
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/0.6
Queue length 0 bytes
Forwarded packets 0, bytes 0
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
IPv6 policy input ipv6InPol25
rate-limit-profile Rlp2Mb classifier-group clgA entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile Rlp8Mb
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
IPv6 policy output ipv6PolOut2
rate-limit-profile RlpOutA classifier-group clgB entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile RlpOutB
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
IPv6 policy local-input ipv6PolLocIn5
rate-limit-profile Rlp1Mb classifier-group clgC entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile Rlp5Mb
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/0.6
Queue length 0 bytes
Forwarded packets 0, bytes 0
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
host1#show ipv6 interface detail
null0 line protocol IpLoopback is up, ipv6 is up
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:1d44
Unnumbered Interface: Corresponding Numbered Interface not specified or
removed
IPv6 statistics:
Rcvd: 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Sent: 0 generated, 0 no routes, 0 discards
ICMPv6 statistics:
Rcvd: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
0 echo replies
Sent: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
0 echo replies
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
Neighbor Discovery is disabled
ICMPv6 statistics:
Rcvd: 0 total, 0 errors
0 rtr solicits, 0 rtr advertisements
0 neighbor solicits, 0 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
Sent: 0 total, 0 errors
0 rtr solicits, 0 rtr advertisements
0 neighbor solicits, 0 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 0, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 0
FastEthernet9/1.5 line protocol VlanSub is up, ipv6 is up
Description: IPv6 interface in Virtual Router Hop5
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:31ce
Internet address: 5:1:1::2/64
IPv6 statistics:
Rcvd: 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Sent: 0 generated, 0 no routes, 0 discards
ICMPv6 statistics:
Rcvd: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
3 echo replies
Sent: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 5 echo requests
0 echo replies
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
ND reachable time is 3600000 milliseconds
ND duplicate address detection attempts is 100
ND neighbor solicitation retransmission interval is 1000 milliseconds
ND proxy is enabled
ND RA source link layer is advertised
ND RA interval is 200 seconds, lifetime is 1800 seconds
ND RA managed flag is disabled, other config flag is disabled
ND RA advertising prefixes configured on interface
ICMPv6 statistics:
Rcvd: 13 total, 0 errors
0 rtr solicits, 8 rtr advertisements
1 neighbor solicits, 1 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
Sent: 31 total, 0 errors
0 rtr solicits, 16 rtr advertisements
5 neighbor solicits, 5 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
In Received Packets 13, Bytes 1356
Unicast Packets 5, Bytes 588
Multicast Packets 8, Bytes 768
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 22, Bytes 2480
Unicast Packets 22, Bytes 2480
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 8, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 8
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/1.5
Queue length 0 bytes
Forwarded packets 4, bytes 680
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
FastEthernet9/0.6 line protocol VlanSub is up, ipv6 is up
Description: IPv6 interface in Virtual Router Hop6
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:31cd
Internet address: 6:1:1::1/64
IPv6 statistics:
Rcvd: 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Sent: 0 generated, 0 no routes, 0 discards
ICMPv6 statistics:
Rcvd: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
0 echo replies
Sent: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
0 echo replies
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
ND reachable time is 3600000 milliseconds
ND duplicate address detection attempts is 100
ND neighbor solicitation retransmission interval is 1000 milliseconds
ND proxy is enabled
ND RA source link layer is advertised
ND RA interval is 200 seconds, lifetime is 1800 seconds
ND RA managed flag is disabled, other config flag is disabled
ND RA advertising prefixes configured on interface
ICMPv6 statistics:
Rcvd: 0 total, 0 errors
0 rtr solicits, 0 rtr advertisements
0 neighbor solicits, 0 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
Sent: 13 total, 0 errors
0 rtr solicits, 9 rtr advertisements
2 neighbor solicits, 2 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 8, Bytes 768
Unicast Packets 8, Bytes 768
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 5, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 5
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/0.6
Queue length 0 bytes
Forwarded packets 0, bytes 0
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
loopback5 line protocol IpLoopback is up, ipv6 is up
Network Protocols: IPv6
Link local address: fe80::90:1a00:740:1d44
Internet address: 10:1:1:0:290:1aff:fe40:1d44/64 (eui-64)
IPv6 statistics:
Rcvd: 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Sent: 0 generated, 0 no routes, 0 discards
ICMPv6 statistics:
Rcvd: 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Sent: 0 generated, 0 no routes, 0 discards
ICMPv6 statistics:
Rcvd: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
0 echo replies
Sent: 0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 echo requests
0 echo replies
Operational MTU 1500 Administrative MTU 0
Operational speed 100000000 Administrative speed 0
Creation type Static
Neighbor Discovery is disabled
ICMPv6 statistics:
Rcvd: 0 total, 0 errors
0 rtr solicits, 0 rtr advertisements
0 neighbor solicits, 0 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
Sent: 0 total, 0 errors
0 rtr solicits, 0 rtr advertisements
0 neighbor solicits, 0 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
0 redirects
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Total Dropped Packets 0, Bytes 0
In Policed Packets 0
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
Out Forwarded Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Routed Packets 0, Bytes 0
Out Total Dropped Packets 0, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 0
IPv6 policy input ipv6InPol25
rate-limit-profile Rlp2Mb classifier-group clgA entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile Rlp8Mb
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
IPv6 policy output ipv6PolOut2
rate-limit-profile RlpOutA classifier-group clgB entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile RlpOutB
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
IPv6 policy local-input ipv6PolLocIn5
rate-limit-profile Rlp1Mb classifier-group clgC entry 1
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
rate-limit-profile Rlp5Mb
Committed: 0 packets, 0 bytes
Conformed: 0 packets, 0 bytes
Exceeded: 0 packets, 0 bytes
queue 0: traffic class best-effort, bound to ipv6 FastEthernet9/0.6
Queue length 0 bytes
Forwarded packets 0, bytes 0
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
host1#show ipv6 interface brief
Interface IPv6-Address Status Protocol Description
---------------------- -------------------- ------- -------- ------------------
null0 Unnumbered up up
FastEthernet9/1.5 5:1:1::2/64 up up IPv6 interface in
Virtual Router Hop
5
FastEthernet9/0.6 6:1:1::1/64 up up IPv6 interface in
Virtual Router Hop
6
loopback5 10:1:1:0:290:1aff:fe up up
40:1d44/64
show ipv6 forwarding-table slot
- Use to display details on the forwarding table for a specific line module only when IPv6 is configured on the router. These details include the memory used by each virtual router configured on the line module and free memory available on the module.
- The Load Errors field records any failed routing table distribution attempt as an error. Attempts can fail for many reasons during normal operation; a failed attempt does not necessarily indicate a problem. It is normal to see many Load Errors per day.
- If the Status field does not indicate Valid, then the routing table distribution has failed constantly for that VR. It is normal and appropriate behavior for the Status field to indicate Valid while the Load Error field increases daily.
- Field descriptions
- Free Memory—Amount of routing table memory free on the line module, in kilobytes
- Virtual Router—Name of the virtual routers configured on the line module
- Memory (KB)—Amount of routing table memory consumed by the virtual router, in kilobytes
- Load Errors—Count of errors made while loading the routing table on the line module
- Status—Whether the routing table for the virtual router is valid
host1#show ipv6 forwarding-table slot 9
Free Memory = 32766 KB (99.99%)
Virtual Router Memory(KB) Load Errors Status
-------------------------------- -------------- ------------- --------------
default - - Not Resident
1 2 0 Valid
show ipv6 neighbors
- Use to display IPv6 Neighbor Discovery cache information static entries, dynamic entries, or both.
- Use the static keyword to display only static entries
- Use the dynamic keyword to display only dynamic entries
- Use the summary keyword to display summary information
- Field descriptions
- Interface—Neighbor interface
- IPv6-Address—IPv6 address for the interface
- Type—Type of interface (dynamic, static)
- Hardware Addr—Layer 2 address of the interface
- State—State of the interface (delay, incomplete, probe, reachable, stale)
- Age—Amount of time (in seconds) since the router contacted the neighbor
- By type—List by neighbor type (global, link-local, anycast, and unknown)
- By state—List by neighbor state (reachable, incomplete, stale, probe, delay, an init)
- IPv6 address conflicts—Number of conflicts during or after duplicate address detection resolution
host1#show ipv6 neighbors
Interface IPv6-Address Type Hardware Addr State Age
---------------------- -------------------- ------- -------------- ----- -----
FastEthernet4/1 1::1 dynamic 0090.1a40.05e5 reach 3
host1#show ipv6 neighbors summary
Total IPv6 neighbors: 7
By type: 5 global, 2 link-local, 0 anycast, 0 unknown
By state: 5 reachable, 0 incomplete, 2 stale, 0 probe, 0 delay, 0 init
IPv6 address conflicts: 0 during DAD resolution, 0 after DAD resolution
show ipv6 profile
- IPv6 profile—Profile name
- Unnumbered interface—Specifier for the unnumbered interface or none if the interface is numbered
- Router—Router name
- Access Route Addition—Enabled or disabled
- Source-Address Validation—Enabled or disabled
- Administrative MTU—MTU size
host1#show ipv6 profile foo
IPv6 profile : foo
Unnumbered interface on : loopback 0
Router : r1
Access Route Addition : Enabled
Source-Address Validation : Disabled
Administrative MTU : 0
show ipv6 protocols
- Local router ID—Router ID of the local router
- Local AS—AS number of local router
- Administrative state—Administrative state of the protocol
- Operational state—Operational state of the protocol
- Shutdown in overload state—Status of shutdown in an overload state
- Default local preference—Default value for local preference
- IGP synchronization—Indicates whether synchronization is enabled or disabled
- Default originate—Indicates whether network 0.0.0.0 is redistributed into BGP
- Auto summary—Status of autosummary
- Always compare MED—Status of always compare MED
- Compare MED within confederation—Status of compare MED within a confederation
- Advertise inactive routes—Status of Advertise inactive routes
- Advertise best external router to internal peers—Status of Advertise best external router to internal peers
- Enforce first AS—Status of Enforce first AS
- Missing MED as worst—Status of Missing MED as worst
- Route flap dampening—Status of route dampening
- Log neighbor changes—Status of Log neighbor changes
- Fast External Fallover—Status of Fast External Fallover
- Maximum received AS-path length—Maximum AS-path length received
- BGP administrative distances—External, internal, and local BGP administrative distances
- Client-to-client reflection—Whether client-to-client reflection is configured
- Cluster ID—Cluster IDs
- Route-target filter—Status of Route-target filter
- Default IPv4-unicast—Status of Default IPv4-unicast
- Local-RIB version—RIB version
- Local-FIB version—FIB version
- Neighbor(s)—BGP neighbors (if configured)
- Networks for which routing is occurring
- Aggregate Generation for Unicast Routes
host1#show ipv6 protocols
Routing Protocol is "bgp 100"
Local router ID 1.1.1.1, local AS 100
Administrative state is Start
Operational state is Up
Shutdown in overload state is disabled
Default local preference is 100
IGP synchronization is enabled
Default originate is disabled
Auto summary is enabled
Always compare MED is disabled
Compare MED within confederation is disabled
Advertise inactive routes is disabled
Advertise best external route to internal peers is disabled
Enforce first AS is disabled
Missing MED as worst is disabled
Route flap dampening is disabled
Log neighbor changes is disabled
Fast External Fallover is disabled
No maximum received AS-path length
BGP administrative distances are 20 (ext), 200 (int), and 200 (local)
Client-to-client reflection is enabled
Cluster ID is 1.1.1.1
Route-target filter is enabled
Default IPv4-unicast is enabled
Local-RIB version 8. FIB version 8.
Neighbor(s):
No neighbors are configured
Routing for Networks:
Aggregate Generation for Unicast Routes:
host1#show ipv6 protocols summary
bgp 100
show ipv6 redistribute
- To—Protocol that routes are distributed into
- From—Protocol that routes are distributed from
- status—Redistribution status
- route map name—Name of the route map
host1#show ipv6 redistribute
To bgp, From static is enabled with route map foo
To bgp, From connected is enabled without a route map
show ipv6 route
- Use to display the current state of the routing table, including routes not used for forwarding.
- You can display all routes, a specific route, detailed information about all or a specific route, or summary counters for the routing table.
- Field descriptions
- Type—Protocol type (possible route types include: Bgp, Connect, Idrp, Igrp, Invalid, Isis, Ndisc, Ospf, Other, Rip, Static)
- Dst (or Distance)—Administrative distance for the route
- Met (or Metric)—Number of hops
- Intf (or Interface)—Interface type and interface specifier
- NextHop—The configured next hop address for this interface
- IfIndex—An autogenerated value for the next hop interface
host1#show ipv6 route
Prefix/Length Type Dst/Met Intf
-------------------------------- ------- ------- --------------------
1::/16 Connect 0/0 loopback1
5::/64 Connect 0/0 ATM4/0.15
6::/64 Static 1/0 ATM4/0.15
2003::/16 Static 1/0 ATM4/0.15
host1#show ipv6 route summary
Unicast routes:
8 total routes, 576 bytes in route entries
0 isis routes
0 rip routes
3 static routes
2 connected routes
1 bgp routes
0 ospf routes
2 other internal routes
0 access routes
0 internally created access host routes
Last route added/deleted: 2::4/128 by BGP
At MON FEB 04 2008 14:18:25 UTC
Unicast routes used only for Multicast RPF check:
0 total routes, 0 bytes in route entries
0 isis routes
0 rip routes
0 static routes
0 connected routes
0 bgp routes
0 ospf routes
0 other internal routes
0 access routes
0 internally created access host routes
0 mbgp routes
0 dvmrp routes
Last route added/deleted: null by Invalid
At MON FEB 04 2008 14:18:04 UTC
MPLS tunnel routes (not used for forwarding):
3 total routes, 216 bytes in route entries
1 bgp tunnel routes
1 ldp tunnel routes
1 rsvp tunnel routes
Last route added/deleted: 2::4/128 by BGP Tunnel
At MON FEB 04 2008 14:18:26 UTC
host1#show ipv6 route 5::/64 detail
5::/64 Type:local Distance:0 Metric:0
NextHop: 1::2 IntfIndex 10007 Intf ATM4/0.15
show ipv6 routers
- Use to display IPv6 router advertisement information received.
- Use the conflicts keyword to display router advertisements that differ from the advertisements configured
- Field descriptions
- Route—Router for which this information applies
- Hops—Number of hops that the router uses in router advertisements
- Lifetime—Lifetime (in seconds) of the neighbor discovery router advertisement
- AddrFlag—State of the neighbor discovery router advertisement managed flag
- OtherFlag—State of the neighbor discovery router advertisement other config flag
- Reachable time—Amount of time (in milliseconds) that the neighbor is expected to remain reachable
- Retransmit time—Interval in which the router retransmits neighbor solicitations
- Prefix—IPv6 network number to include in router advertisements
- Autoconfig—When present, indicates that local host links use the specified prefix for IPv6 autoconfiguration
- Valid lifetime—Amount of time in seconds that the router advertises the IPv6 prefix as valid
- preferred lifetime—Amount of time in seconds that the router advertises the specified IPv6 prefix as preferred
host1#show ipv6 routers
Router FE80::83B3:60A4 on FastEthernet2/0, last update 3 min
Hops 0, Lifetime 6000 sec, AddrFlag=0, OtherFlag=0
Reachable time 0 msec, Retransmit time 0 msec
Prefix 3FFE:C00:8007::800:207C:4E37/96 autoconfig
Valid lifetime -1, preferred lifetime -1
Router FE80::290:27FF:FE8C:B709 on FastEthernet2/1, last update 0 min
Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0
Reachable time 0 msec, Retransmit time 0 msec
host1#show ipv6 routers conflicts
Router FE80::203:FDFF:FE34:7039 on FastEthernet1/0, last update 1 min, CONFLICT
Hops 64, Lifetime 1800 sec, AddrFlag=0, OtherFlag=0
Reachable time 0 msec, Retransmit time 0 msec
Prefix 2003::/64 onlink autoconfig
Valid lifetime -1, preferred lifetime -1
show ipv6 static
- Use to display the status of static routes in the routing table.
- You can specify an IP mask that filters specific routes.
- Field descriptions
- Prefix—IP address prefix
- Length—Prefix length
- Next Hop—IP address of the next hop
- Dst—Administrative distance of the route
- Met—Number of hops
- Interface—Interface type and interface specifier
host1#show ipv6 static
Prefix/Length NextHop Dst/Met Interface
------------------------ ------------------------ ------- --------------------
6::/64 5::2 1/0 ATM4/0.15
2003::/16 5::1 1/0 ATM4/0.15
show ipv6 traffic
- total—Total number of packets received
- local destination—Number of packets received with this router as their destination
- hdr errors—Number of packets containing header errors
- addr errors—Number of packets containing addressing errors
- unkn proto—Number of packets received containing unknown protocols
- discards—Number of discarded packets
- forwarded—Number of packets forwarded
- generated—Number of packets generated
- out disc—Number of packets that could not be routed that were discarded
- total—Total number of received packets
- errors—Error packets received
- destination unreach—Packets received with destination unreachable
- admin unreach—Packets received because the destination was administratively unreachable (for example, the packet encountered a firewall filter)
- parameter problem—Packets received with parameter errors
- time exceeded—Packets received with time-to-live exceeded
- pkt too big—Number of packet-too-big messages received that indicate a packet was too large to forward because of the allowed MTU size
- redirects—Received packet redirects
- echo requests—Echo request (ping) packets
- echo replies—Echo replies received
- rtr solicits—Number of received router solicitations
- rtr advertisements—Number of received router advertisements
- neighbor solicits—Number of received neighbor solicitations
- neighbor advertisements—Number of received neighbor advertisements
- Group membership (queries, responses, reductions)—Number of queries, responses, and reduction requests received from within a group to which the interface is assigned
- total—Total number of received packets
- errors—Error packets received
- destination unreach—Packets received with destination unreachable
- admin unreach—Packets sent because the destination was administratively unreachable (for example, due to a firewall filter)
- parameter problem—Packets received with parameter errors
- time exceeded—Packets received with time-to-live exceeded
- pkt too big—Number of packet-too-big messages sent because a received packet was too large to forward because of the allowed MTU size
- redirects—Received packet redirects
- echo requests—Echo request (ping) packets
- echo replies—Echo replies received
- rtr solicits—Number of sent router solicitations
- rtr advertisements—Number of sent router advertisements
- neighbor solicits—Number of sent neighbor solicitations
- neighbor advertisements—Number of sent neighbor advertisements
- Group membership (queries, responses, reductions)—Number of queries, responses, and reduction requests sent to a group to which the interface is assigned
- total—Total number of received packets
- checksum errors—Checksum error packets received
- no port—No port error packets received
host1#show ipv6 traffic
IPv6 statistics:
Rcvd: 0 total, 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Sent: 0 forwarded, 0 generated
0 out disc
Mcast: 0 received 0 forwarded
Routes: 7 in routing table
ICMPv6 statistics:
Rcvd: 0 total, 0 errors
0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 redirects
0 echo requests, 0 echo replies
0 rtr solicits, 0 rtr advertisements
0 neighbor solicits, 0 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
Sent: 3 total, 0 errors
0 destination unreach, 0 admin unreach, 0 parameter problem
0 time exceeded, 0 pkt too big, 0 redirects
0 echo requests, 0 echo replies
0 rtr solicits, 0 rtr advertisements
2 neighbor solicits, 1 neighbor advertisements
Group membership: 0 queries, 0 responses, 0 reductions
UDP Statistics:
Rcvd: 0 total, 0 checksum errors, 0 no port
Sent: 0 total, 0 errors
show ipv6 udp statistics
host1#show ipv6 udp statistics
UDP Statistics:
Rcvd: 0 total, 0 checksum errors, 0 no port
Sent: 0 total, 0 errors
show license ipv6
host1#show license ipv6
Ipv6 license is ipv6_license
show tcp statistics
- Use to display all TCP statistics (both IPv4 and IPv6).
- Baselining is supported for this command.
- Use the ip keyword to display only IPv4 statistics.
- Use the ipv6 keyword to display only IPv6 statistics.
- Use the brief keyword to display summary information or the detailed keyword to display extensive information.
- Use the diagnostic keyword to display diagnostic information collected on the TCP statistics in addition to the detailed information. This command shows information only for the connections that are active within the context of the VR in which you issue the command.
- Field descriptions
- attempted—Number of outgoing TCP connections attempted
- accepted—Number of incoming TCP connections accepted
- established—Number of TCP connections established
- total pkts—Total number of packets received
- in-sequence pkts—Number of packets received in sequence
- bytes—Number of bytes received
- chksum err pkts—Number of checksum error packets received
- authentication err pkts—Number of authentication error packets received
- bad offset pkts—Number of bad offset packets received
- short pkts—Number of short packets received
- duplicate pkts—Number of duplicate packets received
- out of order pkts—Number of packets received out of order
- total pkts—Total number of packets sent
- data pkts—Number of data packets sent
- bytes—Number of bytes sent
- retransmitted pkts—Number of packets retransmitted
- retransmitted bytes—Number of bytes retransmitted
- Source address/port – local port—Shows the 32 most recent TCP connection attempts that were rejected, including the remote node's IP or IPv6 address and port, the local port for the connection attempt, and the number of identical attempts that have been received on that port in a row. The reason for rejection is not given. This information may be useful in tracking down DoS attacks.
- # connection-reqs rejected—Total number of connection attempts that have been rejected
- # connection-reqs pending—Current number of connection attempts that are pending, awaiting additional data from the peer
- # sonewconn calls that fail—Number of calls to sonewconn that have failed. This statistic often indicates that either a socket connection limit has been reached or that there was no memory to hold the socket data structures.
- Local addr—Local address of the TCP connection
- Local port—Local port number of the TCP connection
- Remote addr—Remote address of the TCP connection
- Remote port—Remote port number of the TCP connection
- State—Current state of the TCP connection
- Authentication—Authentication status of the TCP connection
- total pkts—Total number of packets sent on the TCP connection
- data pkts—Number of data packets sent on the TCP connection
- bytes—Number of bytes sent on the TCP connection
- retransmitted pkts—Number of packets retransmitted on the TCP connection
- retransmitted bytes—Number of bytes retransmitted on the TCP connection
- total pkts—Total number of packets received on the TCP connection
- in-sequence pkts—Number of packets received in sequence on the TCP connection
- bytes—Number of bytes received on the TCP connection
- chksum err pkts—Number of checksum error packets received on the TCP connection
- bad offset pkts—Number of bad offset packets received on the TCP connection
- short pkts—Number of short packets received on the TCP connection
- duplicate pkts—Number of duplicate packets received on the TCP connection
- out of order pkts—Number of packets received out of order on the TCP connection
- Diagnostics: PRU_ Operations counters—Number of calls for each of the indicated PRU_operations within the TCP service API. These are per-connection statistics.
- Wildcard Matches—Number of packets received that matched this TCP connection due to wildcard matching. Matching is expected for listening server connections, such as Telnet, but is not expected for established connections. This is a per-connection statistic.
- Rcv'd Packets after connection closed—Number of packets received on the connection after the connection has been closed (and before the data structure gets removed). This is a per-connection statistic.
- Connect request rejected—Number of times an incoming connection request was not approved. This is a per-connection statistic.
- Connect request approval pending—Number of times that an incoming connection request was held pending, waiting for a subsequent packet. This is a per-connection statistic.
- New soconnect failed—Number of times a SONEWCONN() was tried on a listening connection and failed. This is a per-connection statistic.
- # Write-Wakeups—Number of times a "write wakeup" occurred on the connection. This is a per-connection statistic.
- # Read wakeups—Number of times a "read wakeup" occurred on the connection. This is a per-connection statistic.
- # receives after close—Number of packets received with data after the connection entered the close-wait state. This is a per-connection statistic.
- Retransmit timer—Current value of the retransmit timer
- Persistence timer—Current value of the persistence timer
- Keepalive timer—Current value of the keepalive timer
- 2MSL timer—Current value of the 2MSL (max segment lifetime) timer
- tcpDisconnect()s—Number of times BsdTcp::tcpDisconnect() was called. This is a per-connection statistic.
- keep T/O pre-estab—Number of times the keepalive timer expired before the connection reached the established state. This is a per-connection statistic.
- tcpkeeptimeo_idle—Number of times the keepalive timer popped, but no keepalive was sent because of connection idle-time considerations. This is a per-connection statistic.
- TCP Connection Event Log (most recent at bottom)—Event log for the TCP connection. It shows the last 32 events that occurred on the connection. The most recent event is at the bottom of the list. This is per-connection data.
The following events can be recorded:
The keepalive timer popped. An 8-bit argument that describes how the timer was handled: |
- RSTs acked—Number of RSTs received and then acknowledged by the TCP stack.
- Bogus RSTs—Number of RSTs that were judged to be invalid (that is, their timer expired) and therefore ignored
- SYNs acked—Number of SYNs received and then acknowledged by the TCP stack.
- Bogus SYNs—Number of RSTs that were judged to be invalid (that is, their timer expired) and therefore ignored
- Data Insertions rejected—Number of packets received and dropped because they are believed to have been inserted by an attacker
- PMTUD—Status of path MTU discovery on the virtual router: enabled or disabled
- Administrative Minimum MTU—Minimum MTU that is enabled on any connection; a value of "none" indicates that the minimum is zero (0)
- Administrative Maximum MTU—Maximum MTU that is enabled on any connection; a value of "none" indicates that the maximum is 65535
- Timer 1—Amount of time the virtual router waits after receiving an ICMP Too Big message before attempting to increase the path MTU
- Timer 2—Amount of time the virtual router waits after successfully increasing the MTU before attempting to increase it more
- # ICMP TooBigs—Number of ICMP Too Big messages that the router has received. When PMTU is disabled, this counter does not increase.
- # ICMP TooBigs for unk. connection—Number of ICMP Too Big messages that the router has received for TCP connections that do not exist. When PMTU is disabled, this counter does not increase.
- PMTU Increase Attempts—Number of attempts the router has made to increase the PMTU
- Black Hole Detect Threshold—Number of successive transmissions that must occur on a connection before that connection treats retransmissions as indications that something is wrong
- Override MSS—MSS that is advertised to peers, overriding the MSS that is derived from the interface MTU. This line does not appear in the output if you do not set the value.
- PMTU—Status of MTU/MSS on this virtual router: enabled or disabled
- MSS in effect—MSS currently being used for transmission to the peer. This number changes while various network events occur to cause the router to increase or decrease its estimate of the MSS.
- Calculated MSS to peer—MSS that path MTU discovery has calculated (if PMTUD is enabled) to the peer
- MSS received from peer—MSS that the peer received in a TCP MSS option. If no option is received, the value is zero (0).
- Application set MSS—MSS that an application might have set for the connection
- Xmit Interface MSS—MSS for the interface used to transmit packets to the peer; calculated as the interface MTU minus the size of the TCP and IP headers.
- MSS Sent to Peer—MSS that has been advertised to the peer
- "ICMP DestUn, Frag Req'd and DF Set" messages—Number of ICMP "Destination Unreachable: Fragmentation Required and DF set" messages that the router has received
- Number of attempts to increase PMTU—Number of times the router has attempted to increase the PMTU by probing with a packet that is larger than the known MTU
- Time to next increase attempt—Amount of time, in seconds, until the router retries to increase the MTU
- Black Hole Detection State—State of the black hole detection mechanism: none, detecting, probable, or unknown
- Buffers Outstanding—Number of buffers currently on the connection reordering queue
- High Water—Most buffers that have ever been on the connection reordering queue
- Buffers discarded—Number of buffers that were discarded because keeping them would have exceeded the connection maximum
- TCP PAWS is [enabled/disabled]—Status of the TCP PAWS option; enabled indicates that PAWS is functioning normally (default mode) for TCP segments; disabled indicates that PAWS is disabled for TCP segments
host1#show ipv6 tcp statistics
TCP Global Statistics:
Connections: 7358 attempted, 4 accepted, 7362 established
0 dropped, 14718 closed
Rcvd: 75923 total pkts, 53608 in-sequence pkts, 3120303 bytes
0 chksum err pkts, 0 authentication err pkts, 0 bad offset pkts
0 short pkts, 0 duplicate pkts, 0 out of order pkts
Sent: 82352 total pkts, 44404 data pkts, 657095 bytes
34 retransmitted pkts, 487 retransmitted bytes
TCP Session Statistics:
Local addr: 0.0.0.0, Local port: 23
Remote addr: 0.0.0.0, Remote port: 0
State: LISTEN Authentication: None
Rcvd: 4 total pkts, 0 in-sequence pkts, 0 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 0 total pkts, 0 data pkts, 0 bytes
0 retransmitted pkts, 0 retransmitted bytes
Local addr: 192.168.1.250, Local port: 23
Remote addr: 10.10.0.77, Remote port: 2170
State: ESTABLISHED Authentication: None
Rcvd: 61 total pkts, 34 in-sequence pkts, 41 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 64 total pkts, 45 data
Local addr: 192.168.1.250, Local port: 23
Remote addr: 10.10.0.77, Remote port: 2170
State: ESTABLISHED Authentication: None
Rcvd: 61 total pkts, 34 in-sequence pkts, 41 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 64 total pkts, 45 data pkts, 2304 bytes
0 retransmitted pkts, 0 retransmitted bytes
Local addr: 192.168.1.250, Local port: 23
Remote addr: 192.168.1.139, Remote port: 1038
State: ESTABLISHED Authentication: None
Rcvd: 295 total pkts, 159 in-sequence pkts, 299 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 281 total pkts, 210 data pkts, 3089 bytes
0 retransmitted pkts, 0 retransmitted bytes
host1#show tcp statistics diagnostic
...
Global Diagnostic Data
Unknown Connection log
Source address/port -> local port
128.127.126.125/124 -> 8080 count: 3
111.111.111.111/222 -> 3333 count: 4
# connection-reqs rejected: 0
# connection-reqs pending: 0
# sonewconn calls that fail: 0
...
Diagnostics:
PRU_ Operations counters:
PRU_ATTACH: 0
PRU_DETACH: 0
PRU_BIND: 1
PRU_LISTEN: 1
PRU_CONNECT: 0
PRU_ACCEPT: 0
PRU_DISCONNECT: 0
PRU_SHUTDOWN: 0
PRU_RCVD: 0
PRU_SEND: 0
PRU_ABORT: 0
PRU_CONTROL: 0
PRU_SENSE: 0
PRU_RCVOOB: 0
PRU_SENDOOB: 0
PRU_SOCKADDR: 0
PRU_PEERADDR: 0
PRU_CONNECT2: 0
PRU_FASTTIMO: 0
PRU_SLOWTIMO: 0
PRU_PROTORCV: 0
PRU_PROTOSEND: 0
Wildcard Matches: 2
Rcv'd Packets after connection closed: 0
Connect request rejected: 0
Connect request approval pending 0
New soconnect failed 0
# Write-Wakeups: 0
# Read wakeups 0
# receives after close 0
Retransmit timer: 0
Persistance timer: 0
Keepalive timer: 0
2MSL timer: 0
tcpDisconnect()s: 0
keep T/O pre-estab: 0
tcpkeeptimeo_idle: 0
...
TCP Connection Event Log (most recent at bottom)
TCPS_ELOG_PRU_ATTACH
TCPS_ELOG_PRU_BIND
host1#show tcp statistics detailed
...
RST/SYN-Ack Protection is: ENABLED
RSTs acked: 0
...Bogus RSTs: 0
SYNs acked: 0
...Bogus SYNs: 0
Data Insertions rejected: 0
PMTUD Information: PMTUD: ENABLED
Administrative Minimum MTU: 512
Administrative Maximum MTU: none
Timer 1: 10 minutes
Timer 2: 2 minutes
# ICMP TooBigs: 0
# ICMP TooBigs for unk. connection: 0
PMTU Increase Attempts: 17
Black Hole Detect Threshold: 50 retransmissions
...
MTU/MSS Information
ENABLED on this connection
MSS in effect: 536
Calculated MSS to peer: 536
MSS received from peer: 0
Application set MSS: 0
Xmit Interface MSS: 0
MSS Sent to Peer: 0
"ICMP DestUn, Frag Req'd and DF Set" messages: 0
Number of attempts to increase PMTU: 0
Time to next increase attempt: 0 seconds
Black Hole Detection State: none
...
Out-of-order Packet Queue Information
Buffers Outstanding: 25
High Water: 28
Buffers discarded: 15
...
TCP-Paws is disabled