This section explains how to set a statistics baseline and use the show commands to view your IP configuration and monitor IP interfaces and statistics.
To troubleshoot and monitor IP, use the following system event logs:
For more information about using event logs, see the JUNOSe System Event Logging Reference Guide.
IP statistics are stored in system counters. The only way to reset the system counters is to reboot the router. You can, however, establish a baseline for IP statistics by setting a group of reference counters to zero.
baseline ip
- host1#baseline ip
baseline ip udp
- host1#baseline ip udp
baseline tcp
- host1#baseline tcp
- host1#baseline ip tcp
You can monitor the following aspects of IP using show ip commands:
To set a statistics baseline for IP interfaces, use the baseline tcp and baseline ip udp commands. Use the delta keyword with IP show commands to specify that baselined statistics are to be shown.
You can use the output filtering feature of the show command to include or exclude lines of output based on a text string that you specify. See Command-Line Interface in the JUNOSe System Basics Configuration Guide, for details.
show access-list
host1#show access-list
IP Access List 1:
permit ip 172.31.192.217 0.0.0.0 0.0.0.0 255.255.255.255
permit ip 12.40.0.0 0.0.0.3 0.0.0.0 255.255.255.255
deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
IP Access List 2:
permit ip 172.19.0.0 0.0.255.255 0.0.0.0 255.255.255.255
deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
IP Access List 10:
permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
IP Access List 11:
deny ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
show arp
host1#show arp
Address Age Hardware Addr Interface
172.31.192.217 21340 00d0.58f2.67e0 loopback1
192.168.1.0 20730 00e0.09ed.5312 fastEthernet6/0 *
192.168.1.1 12550 00e0.b06a.4c75 fastEthernet6/0 *
192.168.1.217 21600 0090.1a00.0230 fastEthernet6/0 *
192.168.1.255 21600 00f0.c2d1.1200 fastEthernet6/0 *
12.40.0.2 24320 0020.6393.4233 atm5/0.1
172.18.2.1 21600 0020.bed2.8738 atm5/1.1
172.18.2.2 21600 0020.5b91.60f2 atm5/1.1
172.31.192.206 21600 00d0.43b5.1032 atm5/1.1
show forwarding-table route-holddown
host1#show forwarding-table route-holddown Hold-down timer value is 3 seconds.
show ip
host1#show ip IP Router Id: 192.168.1.155 Router Name: default Default TTL: 60 Reassemble Timeout: 30 SA Validate Trap: false
show ip address
host1#show ip address 10.6.136.73 fastEthernet0/0 is up, line protocol is up Network Protocols: IP Internet address is 10.6.136.73/255.255.128.0 Broadcast address is 255.255.255.255 Operational MTU = 0 Administrative MTU = 0 Operational speed = 1 Administrative speed = 0 Discontinuity Time = 5766 Router advertisement = disabled Proxy Arp = disabled Administrative debounce-time = 10 mSecs Operational debounce-time = disabled Access routing = disabled Multipath mode = hashed
In Received Packets 2849, Bytes 759428
Unicast Packets 2849, Bytes 759428
Multicast Packets 0, Bytes 0
In Policed Packets 0, Bytes 0
In Error Packets 0
In Invalid Source Address Packets 0
In Discarded Packets 0
Out Forwarded Packets 1866, Bytes 84650
Unicast Packets 1866, Bytes 84650
Multicast Routed Packets 0, Bytes 0
Out Scheduler Drops Committed Packets 0, Bytes 0
Out Scheduler Drops Conformed Packets 0, Bytes 0
Out Scheduler Drops Exceeded Packets 0, Bytes 0
Out Policed Packets 0, Bytes 0
Out Discarded Packets 0
show ip as-path-access-list
host1#show ip as-path-access-list
AS Path Access List 1:
permit .*
AS Path Access List 2:
deny .*
AS Path Access List 3:
permit _109_
deny .*
AS Path Access List 4:
permit _109$
deny .*
AS Path Access List 10:
deny _109$
permit ^108_
deny .*
show ip community-list
host1#show ip community-list Community List 1: permit 752877569 (11488:1) permit 752877570 (11488:2) permit 752877571 (11488:3) permit 752877572 (11488:4) Community List 2: permit 4294967043 (local-as)
show ip forwarding-table slot
host1#show ip forwarding-table slot 9 Free Memory = 3,166KB Virtual Router Memory Load Errors Status (KB) ---------------- --------- ------------- -------- vr1 4128 0 Valid vr2 3136 0 Valid vr3 2256 0 Valid default 1024 0 Valid -----------------------------------------------------------
show ip interface
host1#show ip interface detail fastEthernet 0/0 fastEthernet0/0 is up, line protocol is up Description: boston00 fast ethernet interface Link up/down trap is disabled
Internet address is 1.1.1.2/255.255.255.0
IP statistics:
Rcvd: 0 local destination
0 hdr errors, 0 addr errors
0 unkn proto, 0 discards
Frags: 0 reasm ok, 0 reasm req, 0 reasm fails
0 frag ok, 0 frag creates, 0 frag fails
Sent: 31656835 generated, 0 no routes, 0 discards
ICMP statistics:
Rcvd: 0 errors, 0 dst unreach, 0 time exceed
0 param probs, 0 src quench, 0 redirect,
0 echo req, 31656816 echo rpy
0 timestmp req, 0 timestmp rpy
0 addr mask req, 0 addr mask rpy
Sent: 0 errors, 0 dst unreach, 0 time excd
0 param probs, 0 src qnch, 0 redirect
0 timestamp req, 0 timestamp rpy
0 addr mask req, 0 addr mask rpy
In Received Packets 246220, Bytes 344624800
Unicast Packets 246162, Bytes 344621410
Multicast Packets 58, Bytes 3390
In Forwarded Packets 245464, Bytes 343566400
In Total Dropped Packets 756, Bytes 1058400
In Policed Packets 756
In Invalid Source Address Packets 0
In Error Packets 0
In Discarded Packets 0
In Fabric Dropped Packets 0
Out Forwarded Packets 117, Bytes 87297
Unicast Packets 117, Bytes 87297
Multicast Routed Packets 0, Bytes 0
Out Requested Packets 117, Bytes 87297
Out Total Dropped Packets 0, Bytes 0
Out Scheduler Drops Committed Packets 0, Bytes 0
Out Scheduler Drops Conformed Packets 0, Bytes 0
Out Scheduler Drops Exceeded Packets 0, Bytes 0
Out Policed Packets 0
Out Discarded Packets 0
Out Fabric Dropped Packets 0
host1#show ip interface gigabitEthernet 1/1.200
GigabitEthernet1/1 line protocol Ethernet is up, ip is not present
Network Protocols: IP
Multipath mode = hashed
Auto Configure = disabled
Auto Detect = disabled
Inactivity Timer = disabled
Use Framed Routes = disabled
ARP spoof checking = disabled
Warm-restart initial-sequence-preference: Operational = 0 Administrative = 0
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Policed Packets 0, Bytes 0
In Error Packets 0
In Invalid Source Address Packets 0
In Discarded Packets 0
Out Forwarded Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Routed Packets 0, Bytes 0
Out Scheduler Dropped Packets 0, Bytes 0
Out Policed Packets 0, Bytes 0
Out Discarded Packets 0
queue 0: traffic class best-effort, bound to ip GigabitEthernet1/1
Queue length 0 bytes
Forwarded packets 0, bytes 0
Dropped committed packets 0, bytes 0
Dropped conformed packets 0, bytes 0
Dropped exceeded packets 0, bytes 0
If you are losing packets because of fabric congestion, you can use the In Fabric Dropped Packets and Out Fabric Dropped Packets statistics to help determine the location of the bottleneck. Both statistics count the same thing—the same packets dropped because of fabric congestion—but in different directions.
At any given time, the total number of packets dropped in the fabric for all interfaces in the chassis is equal to the sum of all In Fabric Dropped Packets for all interfaces in the chassis, which equals the sum of all Out Fabric Dropped Packets for all interfaces in the chassis.
Packets not dropped for another listed reason are considered to have been dropped in the fabric. The router calculates In Fabric Dropped Packets by subtracting the total number of inbound packets dropped for all other reasons from the In Total Dropped Packets number. The router calculates Out Fabric Dropped Packets by subtracting the total number of outbound packets dropped for all other reasons from the Out Total Dropped Packets number.
The router calculates In Total Dropped Packets by subtracting In Forwarded Packets from In Received Packets. The router calculates Out Total Dropped Packets by subtracting Out Forwarded Packets from Out Received Packets. These statistics are reported while traffic is moving through the router. The router can get false statistics based on packets being forwarded or received after polling and based on which of the statistics is reported first. For example, In Forwarded Packets can be reported as greater than In Received Packets. Rather than displaying In Total Dropped Packets as a negative value, the command displays it as the sum of all drop reasons other than fabric drops; fabric drops are reported as 0, but might actually be nonzero. If you halt traffic, the In Total Dropped Packets and Out Total Dropped Packets values are always correct.
show ip interface shares
host1#show ip interface shares brief
Interface IP-Address Status Protocol Virtual Router null0 255.255.255.255/32 up up fastEthernet0/0 10.13.5.17/24 up up loopback100 202.1.1.1/24 up up atm4/0.1 10.1.1.1/24 up up ip si0 Unnumbered up up vr-a ip si1 Unnumbered up up vr-b:vrf-1
host1#show ip interface shares brief atm 4/0.1
Interface IP-Address Status Protocol Virtual Router atm4/0.1 10.1.1.1/24 up up ip si0 Unnumbered up up vr-a ip si1 Unnumbered up up vr-b:vrf-1
host1#show ip interface shares atm 4/0.1 atm4/0.1 is up, line protocol is up Network Protocols: IP Unnumbered Interface on loopback100 ( IP address 202.1.1.1 ) Operational MTU = 1500 Administrative MTU = 0 Operational speed = 155520000 Administrative speed = 0 Discontinuity Time = 0 Router advertisement = disabled Administrative debounce-time = disabled Operational debounce-time = disabled Access routing = disabled Multipath mode = hashed
In Received Packets 120, Bytes 12000
Unicast Packets 60, Bytes 6000
Multicast Packets 60, Bytes 6000
In Policed Packets 0, Bytes 0
In Error Packets 0
In Invalid Source Address Packets 0
Out Forwarded Packets 101, Bytes 5252
Unicast Packets 101, Bytes 5252
Multicast Routed Packets 0, Bytes 0
Out Scheduler Drops Committed Packets 0, Bytes 0
Out Scheduler Drops Conformed Packets 0, Bytes 0
Out Scheduler Drops Exceeded Packets 0, Bytes 0
Out Policed Packets 0, Bytes 0
ip si0 is up, line protocol is up Network Protocols: IP Virtual Router vr-a Layer 2 interface atm4/0.1 Unnumbered Interface on loopback100 ( IP address 202.1.1.1 ) Operational MTU = 1500 Administrative MTU = 0 Operational speed = 155520000 Administrative speed = 0 Discontinuity Time = 0 Router advertisement = disabled Administrative debounce-time = disabled Operational debounce-time = disabled Access routing = disabled Multipath mode = hashed
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Policed Packets 0, Bytes 0
In Error Packets 0
In Invalid Source Address Packets 0
Out Forwarded Packets 101, Bytes 5252
Unicast Packets 101, Bytes 5252
Multicast Routed Packets 0, Bytes 0
Out Scheduler Drops Committed Packets 0, Bytes 0
Out Scheduler Drops Conformed Packets 0, Bytes 0
Out Scheduler Drops Exceeded Packets 0, Bytes 0
Out Policed Packets 0, Bytes 0
ip si1 is up, line protocol is up Network Protocols: IP Virtual Router vr-b:vrf-1 Layer 2 interface atm4/0.1 . . . Out Policed Packets 0, Bytes 0
host1#show ip interface shares ip si0 ip0 is up, line protocol is up Network Protocols: IP Layer 2 interface atm4/0.1 Unnumbered Interface on loopback100 ( IP address 202.1.1.1 ) Operational MTU = 1500 Administrative MTU = 0 Operational speed = 155520000 Administrative speed = 0 Discontinuity Time = 0 Router advertisement = disabled Administrative debounce-time = disabled Operational debounce-time = disabled Access routing = disabled Multipath mode = hashed
In Received Packets 0, Bytes 0
Unicast Packets 0, Bytes 0
Multicast Packets 0, Bytes 0
In Policed Packets 0, Bytes 0
In Error Packets 0
In Invalid Source Address Packets 0
Out Forwarded Packets 101, Bytes 5252
Unicast Packets 101, Bytes 5252
Multicast Routed Packets 0, Bytes 0
Out Scheduler Drops Committed Packets 0, Bytes 0
Out Scheduler Drops Conformed Packets 0, Bytes 0
Out Scheduler Drops Exceeded Packets 0, Bytes 0
Out Policed Packets 0, Bytes 0
show ip profile
host1#show ip profile foo IP profile : foo IP address : none Unnumbered interface : none Router : Directed Broadcast : Enabled ICMP Redirects : Disabled Access Route Addition : Enabled Network Address Translation: Enabled, domain inside Source-Address Validation : Enabled Ignore DF Bit : Disabled Administrative MTU : 0 Auto Detect : Disabled Auto Configure : Disabled Auto Detect : Disabled IP FlowStats : Enabled
show ip protocols
host1#show ip protocols
Routing Protocol is “ bgp 100”
Redistributing: ospf
Default local preference is 100
IGP synchronization is enabled
Always compare MED is disabled
Router flap damping is disabled
Administrative Distance: external 20 internal 200 local 200
Neighbor(s):
Address 1.1.1.1
Outgoing update distribute list is 2
Outgoing update prefix list is efg
Incoming update prefix tree is abc
Incoming update filter list is 1
Routing for Networks:
192.168.1.0/24
Routing Protocol is “ isis isisOne”
System Id: 0000.0000.0011.00 IS-Type: level-1-2
Distance: 115
Address Summarization:
None
Routing for Networks:
fastEthernet0/0
Routing Protocol is “ ospf 1” with Router ID 192.168.1.151
Distance is 110
Redistributing: isis
Address Summarization:
None
Routing for Networks:
192.168.1.0/255.255.255.0 area 0.0.0.0
Routing Protocol is “ rip”
Router Administrative State: enable
System version RIP1: send = 1, receive = 1 or 2
Update interval: 30 seconds
Invalid after: 180 seconds
hold down time: 120 seconds
flushed interval: 300 seconds
Filter applied to outgoing route update is not set
Filter applied to incoming route update is not set
No global route map
Distance is 120
Interface Tx Rx Auth
fastEthernet0/0 1 1,2 none
Redistributing: ospf
Routing for Networks:
192.168.1.0/255.255.255.0
show ip redistribute
host1#show ip redistribute To ospf, From static is enabled with route map 4 To ospf, From connected is enabled with route map 3
show ip route
host1#show ip route Protocol/Route type codes: I1- ISIS level 1, I2- ISIS level2, I- route type intra, IA- route type inter, E- route type external, i- metric type internal, e- metric type external, O- OSPF, E1- external type 1, E2- external type2, N1- NSSA external type1, N2- NSSA external type2 L- MPLS label, V- VR/VRF, *- indirect next-hop
Prefix/Length Type Next Hop Dist/Met Intf ------------- ---- -------- -------- ------ 172.16.2.0/24 Bgp 192.168.1.102 20/1 fastEthernet0/0 10.10.0.112/32 Static 192.168.1.1 1/1 fastEthernet0/0 10.1.1.0/24 Connect 10.1.1.1 0/1 atm3/0.100
host1#show ip route static Protocol/Route type codes: I1- ISIS level 1, I2- ISIS level2, I- route type intra, IA- route type inter, E- route type external, i- metric type internal, e- metric type external, O- OSPF, E1- external type 1, E2- external type2, N1- NSSA external type1, N2- NSSA external type2 L- MPLS label, V- VR/VRF, *- indirect next-hop
Prefix/Length Type Next Hop Dist/Met Intf ------------- ---- -------- -------- -------------- 10.10.0.112/32 Static 192.168.1.1 1/1 fastEthernet0/0
host1#show ip route summary Unicast routes: 8 total routes, 576 bytes in route entries 0 isis routes 0 rip routes 3 static routes 2 connected routes 1 bgp routes 0 ospf routes 2 other internal routes 0 access routes 0 internally created access host routes
Last route added/deleted: 2::4/128 by BGP At MON FEB 04 2008 14:18:25 UTC
Unicast routes used only for Multicast RPF check: 0 total routes, 0 bytes in route entries 0 isis routes 0 rip routes 0 static routes 0 connected routes 0 bgp routes 0 ospf routes 0 other internal routes 0 access routes 0 internally created access host routes 0 mbgp routes 0 dvmrp routes
Last route added/deleted: null by Invalid At MON FEB 04 2008 14:18:04 UTC
MPLS tunnel routes (not used for forwarding): 3 total routes, 216 bytes in route entries 1 bgp tunnel routes 1 ldp tunnel routes 1 rsvp tunnel routes
Last route added/deleted: 2::4/128 by BGP Tunnel At MON FEB 04 2008 14:18:26 UTC
host1#show ip route all Protocol/Route type codes: I1- ISIS level 1, I2- ISIS level2, I- route type intra, IA- route type inter, E- route type external, i- metric type internal, e- metric type external, O- OSPF, E1- external type 1, E2- external type2, N1- NSSA external type1, N2- NSSA external type2 L- MPLS label, V- VR/VRF, *- indirect next-hop
Prefix/Length Type Next Hop Dist/Met Intf ------------- ---- -------- -------- ------ 0.0.0.0/0 Static 192.168.1.1 1/1 fastEthernet0/0
1.1.1.1/32 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
6.6.6.0/24 Static 192.168.1.1 1/1 fastEthernet0/0
6.33.5.0/24 Static 0.0.0.0 1/1 loopback2
8.8.8.0/24 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
9.9.9.9/32 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
10.0.0.0/8 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
10.10.0.156/32 Static 192.168.1.1 1/1 fastEthernet0/0
11.1.1.1/32 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
11.11.11.12/32 I2-I-i 192.168.1.105 115/10 fastEthernet0/0
22.2.0.0/16 I2-I-i 92.168.1.105 115/10 fastEthernet0/0
34.0.0.0/8 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
172.20.32.0/24 Static 192.168.1.1 1/1 fastEthernet0/0
174.20.32.0/24 I2-I-i 192.168.1.105 115/20 fastEthernet0/0
176.20.32.0/24 Connect 176.20.32.1 0/1 loopback1
192.168.1.0/24 Connect 192.168.1.214 0/1 fastEthernet0/0
201.1.1.0/24 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
201.2.1.0/24 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
201.3.1.0/24 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
202.1.1.1/32 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
207.1.1.0/24 I2-E-i 192.168.1.105 115/10 fastEthernet0/0
host1#show ip route
Protocol/Route type codes:
I1- ISIS level 1, I2- ISIS level2,
I- route type intra, IA- route type inter, E- route type external,
i- metric type internal, e- metric type external,
O- OSPF, E1- external type 1, E2- external type2,
N1- NSSA external type1, N2- NSSA external type2
L- MPLS label, V- VR/VRF, *- indirect next-hop
Prefix/Length Type Next Hop Dst/Met Intf
------------------ ------- --------------- ---------- ------------------------
21.21.21.2/32 Static 0.0.0.0 1/0 loopback0[V:pe2]
2.2.2.2/32 O-I 30.30.30.2 110/3 ATM2/0.30
31.31.31.2 110/3 ATM2/0.31
10.10.10.0/24 Connect 10.10.10.1 0/0 ATM2/0.10
20.20.20.0/24 Connect 20.20.20.1 0/0 ATM2/0.21
4.4.4.4/32 Bgp 2.2.2.2* 200/2
3.3.3.3* 200/2
5.5.5.5/32 Bgp 4.4.4.4* 20/2
host1#show ip route 4.4.4.4 detail
Protocol/Route type codes:
I1- ISIS level 1, I2- ISIS level2,
I- route type intra, IA- route type inter, E- route type external,
i- metric type internal, e- metric type external,
O- OSPF, E1- external type 1, E2- external type2,
N1- NSSA external type1, N2- NSSA external type2
L- MPLS label, V- VRF
4.4.4.4/32 Type: Bgp Distance: 200 Metric: 0 Tag: 0
Indirect NHop: virtual-router: pe1
Address 1.1.1.1 Type Bgp Index 1
NHop: 10.10.10.2 IfIndx: 28 Intf: ATM2/0.10
NHop: 20.20.20.2 IfIndx: 28 Intf: ATM2/0.20
Indirect NHop: virtual-router: pe1
Address 2.2.2.2 Type Bgp Index 2
NHop: 10.10.10.2 IfIndx: 28 Intf: ATM2/0.10
NHop: 20.20.20.2 IfIndx: 28 Intf: ATM2/0.20
show ip route slot
host1#show ip route slot 6 10.10.0.231 IP address Interface Next Hop ------------ ---------------- ------------ 10.10.0.231 fastEthernet 6/0 10.10.0.231
host1#show ip route slot 9 90.248.1.2 IP address Interface Next Hop ------------ ---------------- ------------ 90.248.1.2 serial9/23:2 ---
host1#show ip route slot 9 90.249.255.255 IP address Interface Next Hop ------------ ---------------- ------------ 90.249.255.255 Local Interface ---
show ip socket statistics
host1#show ip socket statistics
5 10.13.5.70:23 --> 10.10.132.71:2000
type: 1 (SOCK_STREAM)
opts = 13 SO_DEBUG SO_REUSEADDR SO_KEEPALIVE
so_state = 177 SS_NOFDREF SS_CANTSENDMORE SS_CANTRCVMORE SS_PRIV
18 0.0.0.0:23 --> 0.0.0.0:0
type: 1 (SOCK_STREAM)
opts = 7 SO_DEBUG SO_ACCEPTCONN SO_REUSEADDR
so_state = 128 SS_PRIV
host1#show ip socket statistics detailed
18 0.0.0.0:23 --> 0.0.0.0:0
type: 1 (SOCK_STREAM)
opts = 7 SO_DEBUG SO_ACCEPTCONN SO_REUSEADDR
so_state = 128 SS_PRIV
pending xmit byte count = 0 recv count 0
Keep alive idle time = 14400 keep alive poll time = 150
Additional state flags:
so_Bound
so_ListenOk
ss_CalledRsSocreate
so_SendtoCalls = 0
so_SendMsgCalls = 0
so_SendCalls = 0
so_SockWriteCalls = 0
so_SendErrors = 0
so_SentBytes = 0
so_BsdCloseNotClosed = 0
so_RecvBytes = 0
so_RecvErrors = 0
so_RecvFroms = 0
so_Recvs = 0
so_RecvMsgs = 0
so_Reads = 0
Socket Event Log (most recent at bottom)
rssocket
sobind - 0
bind - 0
solisten - 0
listen - 0
show ip static
host1# show ip static Prefix/Length Next Hop Met Dist Tag Intf Verify 1.1.1.2/32 1.1.1.2 0 1 0 FastEthernet4/0 2 up 1.1.1.2/32 1.1.1.2 0 1 0 FastEthernet4/1 10.10.133.17/32 10.6.128.1 1 1 0 unresolved 1 down 11.11.11.11/32 3.3.3.3 0 1 0 unresolved 1 down(lr)
show tcp ack-rst-and-syn
host1#show tcp ack-rst-and-syn TCP Ack Rst and Syn Protection is ENABLED
show tcp resequence-buffers
TCP Resequence Buffer Management Configuration
TCP Resequence Buffer Management State
host1#show tcp resequence-buffers
TCP Resequence Buffer Management Configuration
Global Maximum: ###
Default Per-VR Maximum: 250
Default Connection Maximum: 15
This VR Maximum: 300
This VR Connection Maximum: 15
TCP Resequence Buffer Management State
Global buffers in use: 5
High Water: 15
VR Buffers in use: 17
High Water: 32
Buffers Discarded Because Global Limit Exceeded: 25
Buffers Discarded Because VR Limit Exceeded: 15
show tcp path-mtu-discovery
host1#show tcp path-mtu-discovery
TCP PMTU Discovery is ENABLED
Administrative Minimum MTU: 512
Administrative Maximum MTU: 65535
Timer 1: 10 minutes
Timer 2: 2 minutes
Black Hole Detect Threshold: 0 retransmissions
# ICMP TooBigs: 0
# ICMP TooBigs for unk. connections: 0
show tcp paws
host1#show tcp paws TCP PAWS is disabled
show tcp statistics
The following events can be recorded:
![]() |
Note: This count is maintained even when the protection functions are disabled. The value indicates the count of packets that would have been acknowledged if the protections were enabled. Providing this information can help determine whether attacks are occurring. |
![]() |
Note: This count is maintained even when the protection functions are disabled. The value indicates the count of packets that would have been acknowledged if the protections were enabled. Providing this information can help determine whether attacks are occurring. |
![]() |
Note: This count is maintained even when the protection functions are disabled. The value indicates the count of packets that would have been rejected if the protections were enabled. Providing this information can help determine whether attacks are occurring. |
host1#show ip tcp statistics
TCP Global Statistics:
Connections: 7358 attempted, 4 accepted, 7362 established
0 dropped, 14718 closed
Rcvd: 75923 total pkts, 53608 in-sequence pkts, 3120303 bytes
0 chksum err pkts, 0 authentication err pkts, 0 bad offset pkts
0 short pkts, 0 duplicate pkts, 0 out of order pkts
Sent: 82352 total pkts, 44404 data pkts, 657095 bytes
34 retransmitted pkts, 487 retransmitted bytes
TCP Session Statistics:
Local addr: 0.0.0.0, Local port: 23
Remote addr: 0.0.0.0, Remote port: 0
State: LISTEN Authentication: None
Rcvd: 4 total pkts, 0 in-sequence pkts, 0 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 0 total pkts, 0 data pkts, 0 bytes
0 retransmitted pkts, 0 retransmitted bytes
Local addr: 192.168.1.250, Local port: 23
Remote addr: 10.10.0.77, Remote port: 2170
State: ESTABLISHED Authentication: None
Rcvd: 61 total pkts, 34 in-sequence pkts, 41 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 64 total pkts, 45 data
Local addr: 192.168.1.250, Local port: 23
Remote addr: 10.10.0.77, Remote port: 2170
State: ESTABLISHED Authentication: None
Rcvd: 61 total pkts, 34 in-sequence pkts, 41 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 64 total pkts, 45 data pkts, 2304 bytes
0 retransmitted pkts, 0 retransmitted bytes
Local addr: 192.168.1.250, Local port: 23
Remote addr: 192.168.1.139, Remote port: 1038
State: ESTABLISHED Authentication: None
Rcvd: 295 total pkts, 159 in-sequence pkts, 299 bytes
0 chksum err pkts, 0 bad offset pkts, 0 short pkts
0 duplicate pkts, 0 out of order pkts
Sent: 281 total pkts, 210 data pkts, 3089 bytes
0 retransmitted pkts, 0 retransmitted bytes
host1#show ip tcp statistics diagnostic
...
Global Diagnostic Data
Unknown Connection log
Source address/port -> local port
128.127.126.125/124 -> 8080 count: 3
111.111.111.111/222 -> 3333 count: 4
# connection-reqs rejected: 0
# connection-reqs pending: 0
# sonewconn calls that fail: 0
...
Diagnostics:
PRU_ Operations counters:
PRU_ATTACH: 0
PRU_DETACH: 0
PRU_BIND: 1
PRU_LISTEN: 1
PRU_CONNECT: 0
PRU_ACCEPT: 0
PRU_DISCONNECT: 0
PRU_SHUTDOWN: 0
PRU_RCVD: 0
PRU_SEND: 0
PRU_ABORT: 0
PRU_CONTROL: 0
PRU_SENSE: 0
PRU_RCVOOB: 0
PRU_SENDOOB: 0
PRU_SOCKADDR: 0
PRU_PEERADDR: 0
PRU_CONNECT2: 0
PRU_FASTTIMO: 0
PRU_SLOWTIMO: 0
PRU_PROTORCV: 0
PRU_PROTOSEND: 0
Wildcard Matches: 2
Rcv'd Packets after connection closed: 0
Connect request rejected: 0
Connect request approval pending 0
New soconnect failed 0
# Write-Wakeups: 0
# Read wakeups 0
# receives after close 0
Retransmit timer: 0
Persistance timer: 0
Keepalive timer: 0
2MSL timer: 0
tcpDisconnect()s: 0
keep T/O pre-estab: 0
tcpkeeptimeo_idle: 0
...
TCP Connection Event Log (most recent at bottom)
TCPS_ELOG_PRU_ATTACH
TCPS_ELOG_PRU_BIND
host1#show ip tcp statistics detailed ...
RST/SYN-Ack Protection is: ENABLED
RSTs acked: 0
...Bogus RSTs: 0
SYNs acked: 0
...Bogus SYNs: 0
Data Insertions rejected: 0
PMTUD Information: PMTUD: ENABLED
Administrative Minimum MTU: 512
Administrative Maximum MTU: none
Timer 1: 10 minutes
Timer 2: 2 minutes
# ICMP TooBigs: 0
# ICMP TooBigs for unk. connection: 0
PMTU Increase Attempts: 17
Black Hole Detect Threshold: 50 retransmissions
...
MTU/MSS Information
ENABLED on this connection
MSS in effect: 536
Calculated MSS to peer: 536
MSS received from peer: 0
Application set MSS: 0
Xmit Interface MSS: 0
MSS Sent to Peer: 0
"ICMP DestUn, Frag Req'd and DF Set" messages: 0
Number of attempts to increase PMTU: 0
Time to next increase attempt: 0 seconds
Black Hole Detection State: none
...
Out-of-order Packet Queue Information
Buffers Outstanding: 25
High Water: 28
Buffers discarded: 15
...
TCP-Paws is disabled
show ip traffic
host1#show ip traffic
IP statistics: Router Id: 172.31.192.217
Rcvd: 97833 total, 171059 local destination
0 hdr errors, 0 addr errors
167 unkn proto, 0 discards
Frags: 4 reassembled, 30 reasm timed out, 8 reasm req
0 reasm fails, 145 frag ok, 0 frag fail
290 frag creates
Sent: 15 forwarded, 25144 generated, 0 out disc
0 no routes,0 routing discards
Route: 57680 routes in table
0 timestamp req, 0 timestamp rpy
0 addr mask req, 0 addr mask rpy
ICMP statistics:
Rcvd: 561 total, 0 errors, 15 dst unreach
0 time exceed, 0 param probs, 0 src quench
0 redirects, 0 echo req, 0 echo rpy
0 timestamp req, 0 timestamp rpy
0 addr mask req, 0 addr mask rpy
Sent: 463866 total, 0 errors, 163676 dest unreach
0 time excd, 0 param prob, 0 src quench
20 redirects, 463846 echo req, 0 echo rpy
0 timestamp req, 0 timestamp rpy
0 addr mask req, 0 addr mask rpy
UDP Statistics:
Rcvd: 93326 total, 0 checksum errors, 90610 no port
Sent: 0 total, 0 errors
TCP Global Statistics:
Connections: 7358 attempted, 4 accepted, 7362 established
0 dropped, 14718 closed
Rcvd: 75889 total pkts, 53591 in-sequence pkts, 3120283 bytes
0 chksum err pkts, 0 authentication err pkts, 0 bad offset
0 short pkts, 0 duplicate pkts, 0 out of order pkts
Sent: 82318 total pkts, 44381 data pkts, 656321 bytes
34 retransmitted pkts, 487 retransmitted bytes
OSPF Statistics:
IGMP Statistics:
ARP Statistics:
show ip udp statistics
host1#show ip udp statistics UDP Statistics: Rcvd: 39196 total, 0 checksum errors, 29996 no port Sent: 210 total, 0 errors
show profile brief
host1#show profile brief Profile : foo trill profile4
show route-map
host1(config)#route-map westford permit 10
host1(config-route-map)#match community 44
host1(config-route-map)#set local-pref 400
host1(config-route-map)#exit
host1(config)#exit
host1#show route-map westford
route-map 1, permit, sequence 10
Match clauses:
match community 44
Set clauses:
set local-pref 400