fwaccel dos stats

The "fwaccel dos stats" and "fwaccel6 dos stats" commands show and clear the DoS real-time statistics in SecureXL Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway..

Important:

You must run the applicable commands in the Expert mode on the applicable Security Group A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected..
In VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode, you must go to the context of an applicable Virtual System.

In the Expert mode, run: vsenv <VSID>

Syntax for IPv4

g_fwaccel [-i <SecureXL ID>] stats

clear

get

Syntax for IPv6

g_fwaccel6 dos stats

clear

get

Parameters

Parameter	Description
`-i <SecureXL ID>`	Specifies the SecureXL instance ID (for IPv4 only).
No Parameters	Shows the applicable built-in usage.
`clear`	Clears the real-time statistics counters.
`get`	Shows the real-time statistics counters.

Example - Get the current DoS statistics

[Expert@MyChassis-ch0x-0x:0]# g_fwaccel dos stats get
Firewall:
    Number of Elements in Tables:
        Penalty Box Violating IPs: 0 (size: 8192)
        Blacklist Notification Handlers: 0 (size: 1024)
SXL Device 0:
    Total Active Connections: 0
    Total New Connections/Second: 0
    Total Packets/Second: 0
    Total Bytes/Second: 0
    Reasons Packets Dropped:
        IP Fragment: 0
        IP Option: 0
        Penalty Box: 0
        Blacklist: 0
        Rate Limit: 0
    Number of Elements in Tables:
        Penalty Box: 0 (size: 0)
        Non-Empty Blacklists: 0 (size: 0)
        Blacklisted IPs: 0 (size: 0)
        Rate Limit Matches: 0 (size: 0)
        Rate Limit Source Only Tracks: 0 (size: 0)
        Rate Limit Source and Service Tracks: 0 (size: 0)
SXL Devices in Aggregate:
    Reasons Packets Dropped:
        IP Fragment: 0
        IP Option: 0
        Penalty Box: 0
        Blacklist: 0
        Rate Limit: 0
    Number of Elements in Tables:
        Penalty Box: 0
        Non-Empty Blacklists: 0
        Blacklisted IPs: 0
        Rate Limit Matches: 0
        Rate Limit Source Only Tracks: 0
        Rate Limit Source and Service Tracks: 0
[Expert@MyChassis-ch0x-0x:0]#