Hide Navigation Pane
Show Navigation Pane
Feedback
Download
SHA1
show security idp counters tcp-reassembler
Syntax
Release Information
Command introduced in Release 9.2 of Junos OS.
Description
Display the status of all TCP reassembler counter values.
Required Privilege Level
view
Related Topics
clear security idp counters tcp-reassembler
List of Sample Output
show security idp counters tcp-reassemblerOutput Fields
Table 115 lists the output fields for the show security idp counters tcp-reassembler command. Output fields are listed in the approximate order in which they appear.
Table 115: show security idp counters tcp-reassembler Output Fields
Field Name | Field Description |
|---|---|
Bad TCP checksums (Unsupported) | Number of packets that have incorrect TCP checksums. |
Bad TCP headers | Number of bad TCP headers detected. |
Slow path segments | Number of segments that are sent through the slow path if the TCP segment does not pass fast-path segment validation. |
Fast path segments | Number of segments that are sent through the fast path after passing a predefined TCP validation sequence. |
Sequence number wrap around errors | Number of packets that wrap around of the sequence number. |
Session reuses | Number of sessions that reused an already established TCP session. |
SYN retransmissions | Number of SYN packets that are retransmitted. |
Bad three way handshake acknowledgements | Number of packets that have incorrect three-way handshake acknowledgements (ACK packet). |
Sequence number out of sync flows | Number of packets that have out-of-sync sequence numbers. |
Fast path pattern matches in queued up streams | Number of queued packets that have fast path pattern match. |
New segments with no overlaps with old segment | Number of new segments that do not overlap with old segment. |
New segment overlaps with beginning of old segment | Number of new segments that overlap with beginning of old segment. |
New segment overlaps completely with old segment | Number of new segments that overlap completely with old segment. |
New segment is contained in old segment | Number of new segments contained in old segment. |
New segment overlaps with end of old segment | Number of new segments that overlap with the end of old segment. |
New segment begins after end of old segment | Number of new segments that overlap after the end of old segment. |
Memory consumed by new segment | Memory that is consumed by the new segment. |
Segments in memory | Number of segments that are stored in memory for processing. |
Per-flow memory overflows | Number of segments dropped after reaching per flow memory limit. |
Global memory overflows | Number of segments dropped after reaching reassembler global memory limit. |
Overflow drops | Number of packets that are dropped due to memory overflow. |
Copied packets (Unsupported) | Number of packets copied in reassembler. |
Closed Acks | Number of Ack packets seen without having seen SYN on the same session. |
Sample Output
show security idp counters tcp-reassembler
user@host> show
security idp counters tcp-reassembler IDP counters: IDP counter type Value Bad TCP checksums 0 Bad TCP headers 0 Slow path segments 4 Fast path segments 23 Sequence number wrap around errors 0 Session reuses 0 SYN retransmissions 0 Bad three way handshake acknowledgements 0 Sequence number out of sync flows 0 Fast path pattern matches in queued up streams 0 New segments with no overlaps with old segment 0 New segment overlaps with beginning of old segment 0 New segment overlaps completely with old segment 0 New segment is contained in old segment 0 New segment overlaps with end of old segment 0 New segment begins after end of old segment 0 Memory consumed by new segment 0 Segments in memory 0 Per-flow memory overflows 0 Global memory overflows 0 Overflow drops 0 Copied packets 0 Closed Acks 0
