Monitoring ALGs

The J-Web interface provides detailed information about the SIP, H.323, MGCP, and SCCP ALGs.

This section contains the following topics:

Monitoring SIP ALG Information
Monitoring H.323 ALG Information
Monitoring MGCP ALG Information
Monitoring SCCP ALG Information

Monitoring SIP ALG Information

The J-Web interface provides information for SIP ALG calls, counters, rates, and transactions.

This section contains the following topics:

Monitoring SIP ALG Calls
Monitoring SIP ALG Counters
Monitoring SIP ALG Rate Information
Monitoring SIP ALG Transactions

Monitoring SIP ALG Calls

To view information about SIP ALG calls, select Monitor>ALGs>SIP>Calls in the J-Web interface. To view detailed information, select the Call Leg on the SIP calls page.

Alternatively, enter the following CLI command:

show security alg sip calls detail

Table 76 summarizes key output fields in the SIP calls display.

Table 76: Summary of Key SIP Calls Output Fields

Field	Values	Additional Information
SIP Calls Information
Call Leg	Call length identifier.
Zone	Client zone identifier.
RM Group	Resource manager group identifier.
Local Tag	Local tag for the SIP ALG User Agent server.
Remote Tag	Remote tag for the SIP ALG User Agent server.

Monitoring SIP ALG Counters

To view SIP ALG counters information, select Monitor>ALGs>SIP>Count in the J-Web interface, or enter the following CLI command:

show security alg sip counters

Table 77 summarizes key output fields in the SIP counters display.

Table 77: Summary of Key SIP Counters Output Fields

Field	Values	Additional Information
SIP Counters Information
INVITE	Number of INVITE requests sent.	An INVITE request is sent to invite another user to participate in a session.
CANCEL	Number of CANCEL requests sent.	A user can send a CANCEL request to cancel a pending INVITE request. A CANCEL request has no effect if the SIP server processing the INVITE had sent a final response for the INVITE before it received the CANCEL.
ACK	Number of ACK requests sent.	The user from whom the INVITE originated sends an ACK request to confirm reception of the final response to the INVITE request.
BYE	Number of BYE requests sent.	A user sends a BYE request to abandon a session. A BYE request from either user automatically terminates the session.
REGISTER	Number of REGISTER requests sent.	A user sends a REGISTER request to a SIP registrar server to inform it of the current location of the user. A SIP registrar server records all the information it receives in REGISTER requests and makes this information available to any SIP server attempting to locate a user.
OPTIONS	Number of OPTIONS requests sent.	An OPTION message is used by the User Agent (UA) to obtain information about the capabilities of the SIP proxy. A server responds with information about what methods, session description protocols, and message encoding it supports.
INFO	Number of INFO requests sent.	An INFO message is used to communicate mid-session signaling information along the signaling path for the call.
MESSAGE	Number of MESSAGE requests sent.	SIP messages consist of requests from a client to a server and responses to the requests from a server to a client with the purpose of establishing a session (or a call).
NOTIFY	Number of NOTIFY requests sent.	A NOTIFY message is sent to inform subscribers of changes in state to which the subscriber has a subscription.
REFER	Number of REFER requests sent.	A REFER request is used to refer the recipient (identified by the Request-URI) to a third party by the contact information provided in the request.
SUBSCRIBE	Number of SUBSCRIBE requests sent.	A SUBSCRIBE request is used to request current state and state updates from a remote node.
UPDATE	Number of UPDATE requests sent.	An UPDATE request is used to create a temporary opening in the firewall (pinhole) for new or updated Session Description Protocol (SDP) information. The following header fields are modified: Via, From, To, Call-ID, Contact, Route, and Record-Route.
SIP Error Counters
Total Pkt-in	SIP ALG total packets received.
Total Pkt dropped on error	Number of packets dropped by the SIP ALG.
Transaction error	SIP ALG transaction errors.
Call error	SIP ALG call errors.
IP resolve error	SIP ALG IP address resolution errors.
NAT error	SIP ALG NAT errors.
Resource manager error	SIP ALG resource manager errors.
RR header exceeded max	Number of times the SIP ALG RR (Record-Route) headers exceeded the maximum limit.
Contact header exceeded max	Number of times the SIP ALG contact header exceeded the maximum limit.
Call dropped due to limit	SIP ALG calls dropped because of call limits.
SIP stack error	SIP ALG stack errors.

Monitoring SIP ALG Rate Information

To view SIP ALG rate information, select Monitor>ALGs>SIP>Rate in the J-Web interface, or enter the following CLI command:

show security alg sip rate

Table 78 summarizes key output fields in the SIP rate display.

Table 78: Summary of Key SIP Rate Output Fields

Field	Values	Additional Information
SIP Rate Information
CPU ticks per microseconds is	SIP ALG CPU ticks per microsecond.
Time taken for the last message in microseconds is	Time, in microseconds, that the last SIP ALG message needed to transit the network.
Number of messages in 10 minutes	Total number of SIP ALG messages transiting the network in 10 minutes.
Time taken by the messages in 10 minutes	Total time, in microseconds, during an interval of less than 10 minutes for the specified number of SIP ALG messages to transit the network.
Rate	Number of SIP ALG messages per second transiting the network.

Monitoring SIP ALG Transactions

To view information about SIP ALG transactions, select Monitor>ALGs>SIP>Transactions in the J-Web interface, or enter the following CLI command:

show security alg sip transactions

Table 79 summarizes key output fields in the SIP transactions display.

Table 79: Summary of Key SIP Transactions Output Fields

Field	Values	Additional Information
SIP Transactions Information
Transaction Name	UAS—SIP ALG User Agent server transaction name. UAC—SIP ALG User Agent client transaction name.
Method	The method to be performed on the resource. Possible methods: INVITE—Initiate call ACK—Confirm final response BYE—Terminate and transfer call CANCEL—Cancel searches and “ringing” OPTIONS—Features support by the other side REGISTER—Register with location service

Field

Values

Additional Information

SIP Transactions Information

Transaction Name

UAS—SIP ALG User Agent server transaction name.
UAC—SIP ALG User Agent client transaction name.

Method

The method to be performed on the resource. Possible methods:

INVITE—Initiate call
ACK—Confirm final response
BYE—Terminate and transfer call
CANCEL—Cancel searches and “ringing”
OPTIONS—Features support by the other side
REGISTER—Register with location service

Monitoring H.323 ALG Information

To view the H.323 ALG counters information, select Monitor>ALGs>H323 in the J-Web interface, or enter the following CLI command:

show security alg h323 counters

Table 80 summarizes key output fields in the H.323 counters display.

Table 80: Summary of Key H.323 Counters Output Fields

Field	Values	Additional Information
H.323 Counters Information
Packets received	Number of H.323 ALG packets received.
Packets dropped	Number of H.323 ALG packets dropped.
RAS message received	Number of incoming RAS (Endpoint Registration, Admission, and Status) messages per second per gatekeeper received and processed.
Q.931 message received	Counter for Q.931 message received.
H.245 message received	Counter for H.245 message received.
Number of calls	Total number of H.323 ALG calls.
Number of active calls	Number of active H.323 ALG calls.	This counter displays the number of call legs and may not display the exact number of voice calls that are active. For instance, for a single active voice call between two endpoints, this counter might display a value of 2.
H.323 Error Counters
Decoding errors	Number of decoding errors.
Message flood dropped	Error counter for message flood dropped.
NAT errors	H.323 ALG Network Address Translation (NAT) errors.
Resource manager errors	H.323 ALG resource manager errors.

Monitoring MGCP ALG Information

The J-Web interface provides information for MGCP ALG calls, counters, and endpoints.

This section contains the following topics:

Monitoring MGCP ALG Calls
Monitoring MGCP ALG Counters
Monitoring MGCP ALG Endpoints

Monitoring MGCP ALG Calls

To view information about MGCP ALG calls, select Monitor>ALGs>MGCP>Calls in the J-Web interface. To view detailed information, select the endpoint on the MGCP calls page.

Alternatively, enter the following CLI command:

show security alg mgcp calls

Table 81 summarizes key output fields in the MGCP calls display.

Table 81: Summary of Key MGCP Calls Output Fields

Field	Values	Additional Information
MGCP Calls Information
Endpoint@GW	Endpoint name.
Zone	trust—Trust zone. untrust—Untrust zone.
Call ID	Call identifier for ALG MGCP.
RM Group	Resource manager group ID.
Call Duration	Duration for which connection is active.
Connection Id	Connection identifier for MGCP ALG calls.
Calls Details: Endpoint
Local SDP	IP address of the MGCP ALG local call owner, as per the Session Description Protocol (SDP).
Remote SDP	Remote IP address of the MGCP ALG remote call owner, as per the Session Description Protocol (SDP).

Monitoring MGCP ALG Counters

To view MGCP ALG counters information, select Monitor>ALGs>MGCP>Counters in the J-Web interface, or enter the following CLI command:

show security alg mgcp counters

Table 82 summarizes key output fields in the MGCP counters display.

Table 82: Summary of Key MGCP Counters Output Fields

Field	Values	Additional Information
MGCP Counters Information
Packets received	Number of MGCP ALG packets received.
Packets dropped	Number of MGCP ALG packets dropped.
Message received	Number of MGCP ALG messages received.
Number of connections	Number of MGCP ALG connections.
Number of active connections	Number of active MGCP ALG connections.
Number of calls	Number of MGCP ALG calls.
Number of active calls	Number of MGCP ALG active calls.
Number of active transactions	Number of active transactions.
Number of re-transmission	Number of MGCP ALG retransmissions.
Error Counters
Unknown-method	MGCP ALG unknown method errors.
Decoding error	MGCP ALG decoding errors.
Transaction error	MGCP ALG transaction errors.
Call error	MGCP ALG counter errors.
Connection error	MGCP ALG connection errors.
Connection flood drop	MGCP ALG connection flood drop errors.
Message flood drop	MGCP ALG message flood drop error.
IP resolve error	MGCP ALG IP address resolution errors.
NAT error	MGCP ALG Network Address Translation (NAT) errors.
Resource manager error	MGCP ALG resource manager errors.

Monitoring MGCP ALG Endpoints

To view information about MGCP ALG endpoints, select Monitor>ALGs>MGCP>Endpoints in the J-Web interface. To view detailed information, select the gateway on the MGCP endpoints page.

Alternatively, enter the following CLI command:

show security alg mgcp endpoints

Table 83 summarizes key output fields in the MGCP endpoints display.

Table 83: Summary of Key MGCP Endpoints Output Fields

Field	Values	Additional Information
MGCP Endpoints
Gateway	IP address of the gateway.
Zone	trust—Trust zone. untrust—Untrust zone.
IP	IP address.
Endpoints: Gateway name
Endpoint	Endpoint name.
Transaction #	Transaction identifier.
Call #	Call identifier.
Notified Entity	The certificate authority (CA) currently controlling the gateway.

Monitoring SCCP ALG Information

The J-Web interface provides information for SCCP ALG calls, and counters.

This section contains the following topics:

Monitoring SCCP ALG Calls
Monitoring SCCP ALG Counters

Monitoring SCCP ALG Calls

To view information about SCCP ALG calls, select Monitor>ALGs>SCCP>Calls in the J-Web interface. To view detailed information, select the client IP address on the SCCP calls page.

Alternatively, enter the following CLI show command:

show security alg sccp calls

Table 84 summarizes key output fields in the SCCP calls display.

Table 84: Summary of Key SCCP Calls Output Fields

Field	Values	Additional Information
SCCP Calls Information
Client IP	IP address of the client.
Zone	Client zone identifier.
Call Manager	IP address of the call manager.
Conference ID	Conference call identifier.
RM Group	Resource manager group identifier.

Monitoring SCCP ALG Counters

To view SCCP ALG counters information, select Monitor>ALGs>SCCP>Count in the J-Web interface, or enter the following CLI command:

show security alg sccp counters

Table 85 summarizes key output fields in the SCCP counters display.

Table 85: Summary of Key SCCP Counters Output Fields

Field	Values	Additional Information
SCCP Counters Information
Clients currently registered	Number of SCCP ALG clients currently registered.
Active calls	Number of active SCCP ALG calls.
Total calls	Total number of SCCP ALG calls.
Packets received	Number of SCCP ALG packets received.
PDUs processed	Number of SCCP ALG protocol data units (PDUs) processed.
Current call rate	Number of calls per second.
Error counters
Packets dropped	Number of packets dropped by the SCCP ALG.
Decode errors	SCCP ALG decoding errors.
Protocol errors	Number of protocol errors.
Address translation errors	Number of Network Address Translation (NAT) errors encountered by SCCP ALG.
Policy lookup errors	Number of packets dropped because of a failed policy lookup.
Unknown PDUs	Number of unknown protocol data units (PDUs).
Maximum calls exceed	Number of times the maximum SCCP calls limit was exceeded.
Maximum call rate exceed	Number of times the maximum SCCP call rate exceeded.
Initialization errors	Number of initialization errors.
Internal errors	Number of internal errors.
Unsupported feature	Number of unsupported feature errors.
Non specific error	Number of nonspecific errors.