Displaying Statistics from a DoS Attack
To display information about the dropped ICMP
and TCP SYN packets due to increased burst thresholds, enter the show statistics dos-attack
command. The following example displays the output for most ICX devices.
device# show statistics dos-attack
---------------------------- Local Attack Statistics --------------------------
ICMP Drop Count ICMP Block Count SYN Drop Count SYN Block Count
--------------- ---------------- -------------- ---------------
0 0 0 0
--------------------------- Transit Attack Statistics -------------------------
Port ICMP Drop Count ICMP Block Count SYN Drop Count SYN Block Count
----- --------------- ---------------- -------------- ---------------
1/3/11 0 0 0 0
DOS Show Commands for ICX 8200 Devices
To display information about TCP SYN packets that
exceeded burst thresholds on an ICX 8200 device, enter the show
statistics dos-attack tcp command as shown in the
following
example.
ICX8200# show statistics dos-attack tcp Global Attack Statistics ------------------------ TCP-SYN ----------------------- Flags drop count Drop_count ------------------ -------------- 52586 61240 Interface Attack Statistics --------------------------- TCP-SYN -------------------------------- Port Dropped pkts --------- ---------------------- 1/1/10 61240
To display information about ICMP packets that
exceeded burst thresholds on an ICX 8200 device, enter the show
statistics dos-attack icmp command as shown in the
following
example.
ICX8200# show statistics dos-attack icmp Global Attack Statistics ----------------------- ICMP ---------------------- Dropped pkts ------------ 12691072 Interface Attack Statistics --------------------------- ICMP -------- Port Dropped pkts --------- --------------- 1/1/10 1191808
To display information about ICMP fragments
received on an ICX 8200 device, enter the show
statistics dos-attack icmp fragments command as
shown in the following
example.
ICX8200# show statistics dos-attack icmp fragments icmp fragment Statistics ------------------------ Drop_count ------------------ 32396