Displaying Statistics from a DDoS Gratuitous ARP Attack

To display the number of dropped ARP packets on an ICX 8200 device in global configuration mode, enter the show statistics ddos-guard arp drop counter command, as shown in the following example.

device# show statistics ddos-guard arp drop counter

DDOS-GUARD ARP Statistics 
-------------------------
   Drop_count       
------------------  
     117687      

To display the MAC addresses of the top 5 dropped ARP packets and the number of dropped packets on an ICX 8200 device, enter the show statistics ddos-guard arp mac counter command, as shown in the following example.

device# show statistics ddos-guard arp mac counter

DDOS-GUARD ARP mac stats
------------------------
Src MAC         Count
------------------------
0010.9400.000f    212          
0010.9400.0004    212          
0010.9400.000b    212          
0010.9400.000d    213          
0010.9400.0003    223          

To display the configuration details for gratuitous ARP and UDP packet filtering globally, enter the show running configuration command.

device# show running configuration
interface ethernet 2/1/16
speed-duplex 1000-full
ddos-guard udp enable port 1000 2000
ddos-guard arp enable drop