Print Download PDF Send Feedback

Previous

Next

ips stats

Description

This tool generates a report that includes both IPS and Pattern Matcher statistics.

The report can help administrators and protection writers analyze, which IPS protections or IPS components cause performance issues.

The output files are located in the $FWDIR/ips/statistics_results/ directory.

On a Standalone, the tool creates a directory for each specified IP address.

The output files are:

File

Description

ips.dbg

Contains the raw report, which contains all the information.

ips_stat_output_file.csv

Contains the report with the IPS statistics.

pm_output_file.csv

Contains the statistics for the Pattern Matcher.

tier1_output_file.csv

Contains the statistics for the Pattern Matcher first tier.

tier2_output_file.csv

Contains the statistics for the Pattern Matcher second tier.

Syntax

ips stats -h

ips stats

ips stats <Seconds>

ips stats -g <Seconds>

ips stats <IP Address of Gateway>

ips stats <IP Address of Gateway> <Seconds>

ips stats <IP Address of Gateway> -m

Important - To generate a report on a VSX Gateway, you must use the Manual Mode.

Parameters

Parameter

Description

ips stats -h

Shows the applicable built-in usage.

ips stats

Available only in Standalone configurations.

Collects the IPS and Pattern Matcher statistics on the Standalone computer during 20 seconds.

ips stats <Seconds>

Available only in Standalone configurations.

Collects the IPS and Pattern Matcher statistics on the Standalone computer during the specified number of seconds.

ips stats -g <Seconds>

Manual Mode on the current Security Gateway.

Important - You must use this command on a VSX Gateway.

Collects the IPS and Pattern Matcher statistics during the specified number of seconds.

The output file is /ips_tar.tgz (in the root partition)

For analysis, you must copy this file to the root partition on the Management Server.

ips stats <IP Address of Gateway>

Collects the IPS and Pattern Matcher statistics for the Security Gateway with the main specified IP address during 20 seconds.

ips stats <IP Address of Gateway> <Seconds>

Collects the IPS and Pattern Matcher statistics for the Security Gateway with the main specified IP address during the specified number of seconds.

ips stats <IP Address of Gateway> -m

Available only on the Management Server.

Runs an analysis on the output file /ips_tar.tgz that you collected from the Security Gateway with the main specified IP address.

Example 1 - Collect the statistics on the Security Gateway with IP address 192.168.20.14 during 40 seconds

ips_stats 192.168.20.14 40

Example 2- Collect the statistics on the current Security Gateway during 30 seconds

ips_stats –g 30

Example - Analyze the statistics you collected from the Security Gateway with IP address 192.168.20.14

ips_stats 192.168.20.14 –m

Related SK article

sk43733: How to measure CPU time consumed by IPS protections.