Hide Navigation Pane
Show Navigation Pane
Feedback
Download
SHA1
show security idp counters flow
Syntax
Release Information
Command introduced in Release 9.2 of Junos OS.
Description
Display the status of all IDP flow counter values.
Required Privilege Level
view
Related Topics
clear security idp counters flow
List of Sample Output
show security idp counters flowOutput Fields
Table 110 lists the output fields for the show security idp counters flow command. Output fields are listed in the approximate order in which they appear.
Table 110: show security idp counters flow Output Fields
Field Name | Field Description |
|---|---|
Fast-path packets | Number of packets that are set through fast path after completing idp policy lookup. |
Slow-path packets | Number of packet that are sent through slow path during idp policy lookup. |
ICMP-error packets (Unsupported) | Number of ICMP error packets. |
Session construction failed (Unsupported) | Number of times the packet failed to establish the session. |
Session limit reached | Number of sessions that reached idp sessions limit. |
Not a new session (Unsupported) | Number of session that extended from its time limit. |
Invalide index at ageout (Unsupported) | Invalid session index in session ageout message. |
Packet logging | Number of packets saved for packet logging. |
Busy packets (Unsupported) | Number of packets saved as the one or more packets of this session are handed off for async processing. |
Policy cache hits | Number of sessions that matched policy cache. |
Policy cache misses | Number of sessions that did not match policy cache. |
Maximum flow hash collisions | Maximum number of packets of one flow that share the same hash value. |
Bad-UDP-checksumpackets (Unsupported) | Number of packets that received with bad UDP checksum error. |
Gates added | Number of gate entries added for dynamic port identification. |
Gate matches (Unsupported) | Number of times a gate is matched. |
Sessions deleted | Number of sessions deleted. |
Sessions aged-out (Unsupported) | Number of sessions are aged out if no traffic is received within session timeout value. |
Sessions in-use while aged-out (Unsupported) | Number of sessions in use during session ageout. |
TCP flows marked dead on RST/FIN | Number of session marked dead on TCP RST/FIN. |
Sessions constructed | Number of sessions established. |
Sessions destructed | Number of sessions destructed. |
SM Session Create | Number of SM sessions created. |
SM Packet Process | Number of packets processed from SM. |
SM Session close | Number of SM sessions closed. |
Sample Output
show security idp counters flow
user@host> show
security idp counters flow IDP counters: IDP counter type Value Fast-path packets 0 Slow-path packets 1 ICMP-error packets 0 Session construction failed 0 Session limit reached 0 Not a new session 0 Invalide index at ageout 0 Packet logging 0 Busy packets 0 Policy cache hits 0 Policy cache misses 1 Maximum flow hash collisions 0 Flow hash collisions 0 Bad-UDP-checksum packets 0 Gates added 0 Gate matches 0 Sessions deleted 1 Sessions aged-out 0 Sessoins in-use while aged-out 0 TCP flows marked dead on RST/FIN 1 Sessions constructed 1 Sessions destructed 1 SM Session Create 1 SM Packet Process 28 SM Session close 1
