Monitoring Suspicious Control Flow Statistics

Purpose

Display statistics for suspicious control flow detection. When a slot is specified, displays only information for the specific slot. If no slot is specified, displays information for all slots. The delta keyword displays statistics for the current baseline.

Action

To display statistics for suspicious control flow detection:

host1(config)#show suspicious-control-flow-detection counts
Suspicious Flow Detection System Counts
        Number of suspicious flows total: 0
        Number of suspicious flows current: 0
        Number of groups total: 0
        Number of groups current: 0
        Number of false negatives total: 0
        Number of false negatives current: 0
        Number of table overflows: 0

Meaning

Table 78 lists the show suspicious-control-flow-detection counts command output fields.

Table 78: show suspicious-control-flow-detection counts Output Fields

Field Name

Field Description

Number of suspicious flows total

Total number of suspicious flows, current and past

Number of suspicious flows current

Number of suspicious flows currently detected and monitored

Number of groups total

Total number of groups, current and past

Number of groups current

Number of groups currently detected and monitored

Number of false negatives total

Total number of flows monitored that have not become suspicious (exceeded their threshold)

Number of false negatives current

Current number of flows monitored that have not become suspicious (exceeded their threshold)

Number of table overflows

Number of times a flow table overflows

Related Documentation