Description
This tool generates a report that includes both IPS and Pattern Matcher statistics.
The report can help administrators and protection writers analyze, which IPS protections or IPS components cause performance issues.
The output files are located in the $FWDIR/ips/statistics_results/
directory.
On a Standalone, the tool creates a directory for each specified IP address.
The output files are:
File |
Description |
---|---|
|
Contains the raw report, which contains all the information. |
|
Contains the report with the IPS statistics. |
|
Contains the statistics for the Pattern Matcher. |
|
Contains the statistics for the Pattern Matcher first tier. |
|
Contains the statistics for the Pattern Matcher second tier. |
Syntax
ips stats -h |
ips stats |
ips stats <Seconds> |
ips stats -g <Seconds> |
ips stats <IP Address of Gateway> |
ips stats <IP Address of Gateway> <Seconds> |
ips stats <IP Address of Gateway> -m |
Important - To generate a report on a VSX Gateway, you must use the Manual Mode.
Parameters
Parameter |
Description |
|
Shows the applicable built-in usage. |
|
Available only in Standalone configurations. Collects the IPS and Pattern Matcher statistics on the Standalone computer during 20 seconds. |
|
Available only in Standalone configurations. Collects the IPS and Pattern Matcher statistics on the Standalone computer during the specified number of seconds. |
|
Manual Mode on the current Security Gateway. Important - You must use this command on a VSX Gateway. Collects the IPS and Pattern Matcher statistics during the specified number of seconds. The output file is For analysis, you must copy this file to the root partition on the Management Server. |
|
Collects the IPS and Pattern Matcher statistics for the Security Gateway with the main specified IP address during 20 seconds. |
|
Collects the IPS and Pattern Matcher statistics for the Security Gateway with the main specified IP address during the specified number of seconds. |
|
Available only on the Management Server. Runs an analysis on the output file |
Example 1 - Collect the statistics on the Security Gateway with IP address 192.168.20.14 during 40 seconds
ips_stats 192.168.20.14 40
Example 2- Collect the statistics on the current Security Gateway during 30 seconds
ips_stats –g 30
Example - Analyze the statistics you collected from the Security Gateway with IP address 192.168.20.14
ips_stats 192.168.20.14 –m
Related SK article
sk43733: How to measure CPU time consumed by IPS protections.