Displaying Syn Cookie Statistics - Cisco 4700M Configuration Manual

Displaying Configurations and Statistics for TCP/IP and UDP Connections, IP Reassembly, and SYN Cookie

Displaying SYN Cookie Statistics

Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
4-62
Chapter 4
Table 4-14 Field Descriptions for the show service-policy Command
Output (continued)
Field Description
Hit Count Number of connections that the ACE.
Dropped Number of connections that the ACE discarded.
Conns
Client Pkt Number of packets received from clients.
Count
Client Byte Number of bytes received from clients.
Count
Server Pkt Number of packets received from servers.
Count
Server Byte Number of bytes received from servers.
Count
Max Conn Configured maximum number of connections limit.
Limit
Conn Rate Configured connection rate limit.
Limit
Bandwidth Configured bandwidth rate limit.
Rate Limit
Drop Count Number of times that a connection was dropped because the
connection rate limit or the bandwidth rate limit was
reached.
To display SYN cookie statistics, use the show syn-cookie command in Exec
mode. To display SYN cookie statistics for all VLANs that are configured in the
current context, enter the command with no arguments. The syntax of this
command is as follows:
show syn-cookie [vlan number]
The optional vlan number keyword and argument instruct the ACE to display
SYN cookie statistics for the specified interface. Enter an integer from 2 to 2024.
Configuring TCP/IP Normalization and IP Reassembly Parameters
OL-16202-01