<ip-error-counters>

Usage

<sfw-stats-service-set-entry>
    <ip-error-counters>
        <ip-length-error>ip-length-error</ip-length-error>
        <ip-header-length-error>ip-header-length-error</ip-header-length-error>
        <long-packet>long-packet</long-packet>
        <illegal-source-address>illegal-source-address</illegal-source-address>
        <illegal-destination-address>illegal-destination-address
                                    </illegal-destination-address>
        <ttl-zero>ttl-zero</ttl-zero>
        <illegal-ip-protocol>illegal-ip-protocol</illegal-ip-protocol>
        <land-attack>land-attack</land-attack>
        <non-ipv4>non-ipv4</non-ipv4>
        <bad-checksum>bad-checksum</bad-checksum>
        <illegal-fragment-length>illegal-fragment-length</illegal-fragment-length>
        <fragment-overlap>fragment-overlap</fragment-overlap>
        <fragment-reassembly-timeout>fragment-reassembly-timeout
                                    </fragment-reassembly-timeout>
        <unknown>unknown</unknown>
    </ip-error-counters>
</sfw-stats-service-set-entry>

Description

Extensive output of IP processing errors.

Contents

<bad-checksum>—Bad checksum.

<fragment-overlap>—IP fragment overlap.

<fragment-reassembly-timeout>—IP fragment reassembly timeout.

<illegal-destination-address>—Illegal destination address.

<illegal-fragment-length>—Illegal IP fragment length.

<illegal-ip-protocol>—Illegal IP protocol number (0 or 255).

<illegal-source-address>—Illegal source address.

<ip-header-length-error>—Minimum IP header length check failures.

<ip-length-error>—IP packet length inconsistencies.

<land-attack>—IP source address same as destination address.

<long-packet>—Reassembled packet exceeds maximum IP length (65,535 bytes).

<non-ipv4>—Non-IPv4 packets.

<ttl-zero>—IP packets received with a TTL value of 0.

<unknown>—Unknown errors.