Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

show services dns-snooping counters

Syntax

Description

Display DNS snooping counters details.

Required Privilege Level

view

Output Fields

table lists the output fields for the show services dns-snooping counters command. Output fields are listed in the approximate order in which they appear.

Table 1: show services dns-snooping counters Output Fields

Field Name

Field Description

DNS-Snooping counters on FPC:fpc0

 FPC number

Sessions ignored

 Number of sessions ignored for DNS snooping. This counter increaments when:
  • A session is not the DNS traffic
  • DNS-snooping is not enabled globally or in a policy
  • No FQDN configured in the policy or NAT

Sessions interested

 Number of sessions considered for DNS snooping. This counter increments when the DNS snooping configuration is present and the incoming session is subjected to decode the DNS snooping data.

Sessions created

Number of session allocated once the DNS-snooping is interested in the session.

Sessions destroyed

 Number of sessions destroyed.

Session dns contexts

 Number of DNS contexts such as DNS hostname, DNS IP address, DNS TTL generated from a DNS packet.

Cache fqdn inserted

Number of FQDNs configured in a policy or in NAT that are pushed to dataplane for enabling snoopiong on those specific FQDNs.

Cache fqdn deleted

Number of FQDNs deleted from the policy or NAT configuration.

When you delete an FQDN from a security policy, it is removed from FQDN-cache.

Cache ip inserted

Number of IP addresses extracted from the DNS packets for configured FQDNs.

Cache ip deleted

Number of IP addresses deleted on TTL expiry.

Reports Generated

Any change detected in configured FQDN's IP or TTL based on snooping of incoming data.

Reports Sent

 Change communicated to Control plane to add data to DNS common cache.

Memory allocated

Instances of memory allocations in dataplane for DNS snooping.

Memory allocation failed

 Memory allocation failures in dataplane.

Memory freed

 Memory freed in dataplane.

Memory free errors

Memory free errors in dataplane.

Appid errors

 Application Identification (AppID) is unable to decode the DNS packet because of protocol error with the traffic or absence of AppID protobundle or licence on the device.

HA msg sent

 Messages related to high-availability nodes sent.

HA msg received

 Messages related to high-availability nodes received.

Sample Output

show services dns-snooping counters

Release Information

Command introduced in Junos OS Release 25.2R1.