Cisco Catalyst 6500 Series Configuration Manual page 104

Monitoring Security Contexts
Beginning with Release 2.3, using the show local host command is not a reliable method for monitoring
Note
the rate of SYN attacks.
The following sample display shows the rate of TCP intercepts for a context called
FWSM/admin# show perfmon
Context:admin
PERFMON STATS:
Xlates
Connections
TCP Conns
UDP Conns
URL Access
URL Server Req
WebSns Req
TCP Fixup
HTTP Fixup
FTP Fixup
AAA Authen
AAA Author
AAA Account
TCP Intercept
The following sample display shows the amount of resources being used by TCP intercept for individual
contexts. (Sample text in italics shows the TCP intercept information.)
FWSM(config)# show resource usage detail
Resource
memory
chunk:channels
chunk:fixup
chunk:hole
chunk:ip-users
chunk:list-elem
chunk:list-hdr
chunk:route
chunk:static
tcp-intercept-rate
np-statics
statics
ace-rules
console-access-rul
fixup-rules
memory
chunk:channels
chunk:dbgtrace
chunk:fixup
chunk:global
chunk:hole
chunk:ip-users
chunk:udp-ctrl-blk
chunk:list-elem
chunk:list-hdr
chunk:nat
chunk:route
chunk:static
tcp-intercept-rate
globals
np-statics
statics
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
5-30
Current Average
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
322779/s 322779/s
Current Peak
843732 847288
14
15
1
10
21
3
2
1
328787 803610
3
1
1
2
14
959872 960000
15
1
15
1
2
10
1
24
5
1
2
1
16056 16254
1
3
1
Chapter 5
Limit Denied Context
unlimited
15 unlimited
15 unlimited
1 unlimited
10 unlimited
21 unlimited
4 unlimited
2 unlimited
1 unlimited
unlimited
3 unlimited
1 unlimited
1 N/A
2 N/A
15 N/A
unlimited
16 unlimited
1 unlimited
15 unlimited
1 unlimited
2 unlimited
10 unlimited
1 unlimited
24 unlimited
6 unlimited
1 unlimited
2 unlimited
1 unlimited
unlimited
1 unlimited
3 unlimited
1 unlimited
Managing Security Contexts
.
admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
OL-6392-01