<drop_counters>

Usage

<sfw-stats-service-set-entry>
    <drop_counters>
        <ip-option>ip-option</ip-option>
        <syn-defense>syn-defense</syn-defense>
        <nat-ports-exhausted>nat-ports-exhausted</nat-ports-exhausted>
    </drop_counters>
</sfw-stats-service-set-entry>

Description

Drop counters (rules or resource exhaustion).

Contents

<ip-option>—IP option drops.

<nat-ports-exhausted>—NAT ports exhausted.

<syn-defense>—Incomplete TCP handshakes.