<tcp-error-counters>

Usage

<sfw-stats-service-set-entry>
    <tcp-error-counters>
        <tcp-header-length-error>tcp-header-length-error</tcp-header-length-error>
        <tcp-zero-port>tcp-zero-port</tcp-zero-port>
        <illegal-sequence-number-flags>illegal-sequence-number-flags
                                    </illegal-sequence-number-flags>
        <syn-attack>syn-attack</syn-attack>
        <non-syn-first-packet>non-syn-first-packet</non-syn-first-packet>
        <tcp-port-scan>tcp-port-scan</tcp-port-scan>
        <bad-syn-cookie-response>bad-syn-cookie-response</bad-syn-cookie-response>
        <tcp-recon-sequence-number-error>tcp-recon-sequence-number-error
                                    </tcp-recon-sequence-number-error>
        <tcp-recon-retransmits>tcp-recon-retransmits</tcp-recon-retransmits>
    </tcp-error-counters>
</sfw-stats-service-set-entry>

Description

Extensive output of TCP processing errors.

Contents

<bad-syn-cookie-response>—Bad SYN cookie response.

<illegal-sequence-number-flags>—Illegal sequence number and flags combinations.

<non-syn-first-packet>—First packet not a SYN message.

<syn-attack>—SYN attack.

<tcp-header-length-error>—TCP header length inconsistencies.

<tcp-port-scan>—TCP port scan.

<tcp-recon-retransmits>—TCP reconstructor retransmissions.

<tcp-recon-sequence-number-error>—TCP reconstructor sequence number error.

<tcp-zero-port>—Source or destination port number is zero.