Example Outputs of the "fwaccel stats" Commands
Example: fwaccel stats -s
Example of statistics summary:
Accelerated conns/Total conns : 0/0 (0%) Accelerated pkts/Total pkts : 0/8 (0%) F2Fed pkts/Total pkts : 8/8 (100%) F2V pkts/Total pkts : 0/8 (0%) CPASXL pkts/Total pkts : 0/8 (0%) PSLXL pkts/Total pkts : 0/8 (0%) QOS inbound pkts/Total pkts : 0/8 (0%) QOS outbound pkts/Total pkts : 0/8 (0%) Corrected pkts/Total pkts : 0/8 (0%) |
Example: fwaccel stats
Example of the default output:
Name Value Name Value ---------------------------- ------------ ---------------------------- ------------ Accelerated Path -------------------------------------------------------------------------------------- accel packets 0 accel bytes 0 outbound packets 0 outbound bytes 0 conns created 0 conns deleted 0 C total conns 0 C TCP conns 0 C non TCP conns 0 nat conns 0 dropped packets 0 dropped bytes 0 fragments received 0 fragments transmit 0 fragments dropped 0 fragments expired 0 IP options stripped 0 IP options restored 0 IP options dropped 0 corrs created 0 corrs deleted 0 C corrections 0 corrected packets 0 corrected bytes 0 Accelerated VPN Path -------------------------------------------------------------------------------------- C crypt conns 0 enc bytes 0 dec bytes 0 ESP enc pkts 0 ESP enc err 0 ESP dec pkts 0 ESP dec err 0 ESP other err 0 espudp enc pkts 0 espudp enc err 0 espudp dec pkts 0 espudp dec err 0 espudp other err 0 Medium Streaming Path -------------------------------------------------------------------------------------- CPASXL packets 0 PSLXL packets 0 CPASXL async packets 0 PSLXL async packets 0 CPASXL bytes 0 PSLXL bytes 0 C CPASXL conns 0 C PSLXL conns 0 CPASXL conns created 0 PSLXL conns created 0 PXL FF conns 0 PXL FF packets 0 PXL FF bytes 0 PXL FF acks 0 PXL no conn drops 0 Inline Streaming Path -------------------------------------------------------------------------------------- PSL Inline packets 0 PSL Inline bytes 0 CPAS Inline packets 0 CPAS Inline bytes 0 QoS Paths -------------------------------------------------------------------------------------- QoS General Information: ------------------------ Total QoS Conns 0 QoS Classify Conns 0 QoS Classify flow 0 Reclassify QoS policy 0 FireWall QoS Path: ------------------ Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 Accelerated QoS Path: --------------------- Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 Firewall Path-------------------------------------------------------------------------------------- F2F packets 35324 F2F bytes 1797781 TCP violations 0 F2V conn match pkts 0 F2V packets 0 F2V bytes 0 GTP -------------------------------------------------------------------------------------- gtp tunnels created 0 gtp tunnels 0 gtp accel pkts 0 gtp f2f pkts 0 gtp spoofed pkts 0 gtp in gtp pkts 0 gtp signaling pkts 0 gtp tcpopt pkts 0 gtp apn err pkts 0 General -------------------------------------------------------------------------------------- memory used 38798784 C tcp handshake conns 0 C tcp established conns 0 C tcp closed conns 0 C tcp pxl handshake conns 0 C tcp pxl established conns 0 C tcp pxl closed conns 0 outbound cpasxl packets 0 outbound pslxl packets 0 outbound cpasxl bytes 0 outbound pslxl bytes 0 DNS DoR stats 0 (*) Statistics marked with C refer to current value, others refer to total value |
Example: fwaccel stats -c
Example of statistics for Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Correction:
Cluster Correction stats: Name Value Name Value ----------------------- ------------ ----------------------- ------------ Sent pkts (total) 0 Sent with metadata 0 Received pkts (total) 0 Received with metadata 0 Sent bytes 0 Received bytes 0 Send errors 0 Receive errors 0 |
Example: fwaccel stats -d
Example of statistics for drops from device:
Reason Value Reason Value -------------------- --------------- -------------------- --------------- general reason 0 CPASXL decision 0 PSLXL decision 0 clr pkt on vpn 0 encrypt failed 0 drop template 0 decrypt failed 0 interface down 0 cluster error 0 XMT error 0 anti spoofing 0 local spoofing 0 sanity error 0 monitored spoofed 0 QOS decision 0 C2S violation 0 S2C violation 0 Loop prevention 0 DOS Fragments 0 DOS IP Options 0 DOS Blacklists 0 DOS Penalty Box 0 DOS Rate Limiting 0 Syn Attack 0 Reorder 0 Expired Fragments 0 |
Example: fwaccel stats -l
Example of the output in legacy mode (as one table):
Name Value Name Value ---------------------------- ------------ ---------------------------- ------------ - 0 accel packets 0 accel bytes 0 outbound packets 0 outbound bytes 0 conns created 0 conns deleted 0 C total conns 0 C TCP conns 0 C non TCP conns 0 nat conns 0 dropped packets 0 dropped bytes 0 fragments received 0 fragments transmit 0 fragments dropped 0 fragments expired 0 IP options stripped 0 IP options restored 0 IP options dropped 0 corrs created 0 corrs deleted 0 C corrections 0 corrected packets 0 corrected bytes 0 C crypt conns 0 enc bytes 0 dec bytes 0 ESP enc pkts 0 ESP enc err 0 ESP dec pkts 0 ESP dec err 0 ESP other err 0 espudp enc pkts 0 espudp enc err 0 espudp dec pkts 0 espudp dec err 0 espudp other err 0 acct update interval 3600 CPASXL packets 0 PSLXL packets 0 CPASXL async packets 0 PSLXL async packets 0 CPASXL bytes 0 PSLXL bytes 0 C CPASXL conns 0 C PSLXL conns 0 CPASXL conns created 0 PSLXL conns created 0 PXL FF conns 0 PXL FF packets 0 PXL FF bytes 0 PXL FF acks 0 PXL no conn drops 0 PSL Inline packets 0 PSL Inline bytes 0 CPAS Inline packets 0 CPAS Inline bytes 0 Total QoS Conns 0 QoS Classify Conns 0 QoS Classify flow 0 Reclassify QoS policy 0 Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 F2F packets 35383 F2F bytes 1801493 TCP violations 0 F2V conn match pkts 0 F2V packets 0 F2V bytes 0 gtp tunnels created 0 gtp tunnels 0 gtp accel pkts 0 gtp f2f pkts 0 gtp spoofed pkts 0 gtp in gtp pkts 0 gtp signaling pkts 0 gtp tcpopt pkts 0 gtp apn err pkts 0 memory used 38798784 C tcp handshake conns 0 C tcp established conns 0 C tcp closed conns 0 C tcp pxl handshake conns 0 C tcp pxl established conns 0 C tcp pxl closed conns 0 outbound cpasxl packets 0 outbound pslxl packets 0 outbound cpasxl bytes 0 outbound pslxl bytes 0 DNS DoR stats 0 (*) Statistics marked with C refer to current value, others refer to total value |
Example: fwaccel stats -m
Example of statistics for multicast traffic:
Name Value Name Value -------------------- --------------- -------------------- --------------- in packets 0 out packets 0 if restricted 0 conns with down if 0 f2f packets 0 f2f bytes 0 dropped packets 0 dropped bytes 0 accel packets 0 accel bytes 0 mcast conns 0 |
Example: fwaccel stats -n
Example of statistics for Identity Awareness Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. (NAC):
Name Value Name Value -------------------- --------------- -------------------- --------------- NAC packets 0 NAC bytes 0 NAC connections 0 compliance failure 0 |
Example: fwaccel stats -o
Example of statistics for Reorder Infrastructure:
Appliaction: F2V Statistic Value ----------------------------------- -------------------- Queued pkts 0 Max queued pkts 0 Timer triggered 0 Callback hahndling unhold 0 Callback hahndling unhold and drop 0 Callback hahndling reset 0 Dequeued pkts resumed 0 Queue ent allocated 0 Queue ent freed 0 Queues allocated 0 Queues freed 0 Ack notif sent 0 Ack respones handling 0 Dequeued pkts dropped 0 Reached max queued pkt limit 0 Set timer failed 0 Error already held 0 Queue ent alloc failed 0 Queue alloc failed 0 Ack notif failed 0 Ack respones handling failed 0 ---------------------------------------------------- Appliaction: Route Statistic Value ----------------------------------- -------------------- Queued pkts 0 Max queued pkts 0 Timer triggered 0 Callback hahndling unhold 0 Callback hahndling unhold and drop 0 Callback hahndling reset 0 Dequeued pkts resumed 0 Queue ent allocated 0 Queue ent freed 0 Queues allocated 0 Queues freed 0 Ack notif sent 0 Ack respones handling 0 Dequeued pkts dropped 0 Reached max queued pkt limit 0 Set timer failed 0 Error already held 0 Queue ent alloc failed 0 Queue alloc failed 0 Ack notif failed 0 Ack respones handling failed 0 ---------------------------------------------------- Appliaction: New connection Statistic Value ----------------------------------- -------------------- Queued pkts 0 Max queued pkts 0 Timer triggered 0 Callback hahndling unhold 0 Callback hahndling unhold and drop 0 Callback hahndling reset 0 Dequeued pkts resumed 0 Queue ent allocated 0 Queue ent freed 0 Queues allocated 0 Queues freed 0 Ack notif sent 0 Ack respones handling 0 Dequeued pkts dropped 0 Reached max queued pkt limit 0 Set timer failed 0 Error already held 0 Queue ent alloc failed 0 Queue alloc failed 0 Ack notif failed 0 Ack respones handling failed 0 ---------------------------------------------------- Appliaction: F2P Statistic Value ----------------------------------- -------------------- Queued pkts 0 Max queued pkts 0 Timer triggered 0 Callback hahndling unhold 0 Callback hahndling unhold and drop 0 Callback hahndling reset 0 Dequeued pkts resumed 0 Queue ent allocated 0 Queue ent freed 0 Queues allocated 0 Queues freed 0 Ack notif sent 0 Ack respones handling 0 Dequeued pkts dropped 0 Reached max queued pkt limit 0 Set timer failed 0 Error already held 0 Queue ent alloc failed 0 Queue alloc failed 0 Ack notif failed 0 Ack respones handling failed 0 ---------------------------------------------------- |
Example: fwaccel stats -p
Example of statistics for SecureXL Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway. violations (F2F Denotes non-VPN connections that SecureXL forwarded to firewall. See "Firewall Path". packets):
F2F packets: -------------- Violation Packets Violation Packets -------------------- --------------- -------------------- --------------- pkt has IP options 0 ICMP miss conn 3036 TCP-SYN miss conn 8 TCP-other miss conn 32224 UDP miss conn 3772 other miss conn 0 VPN returned F2F 0 uni-directional viol 0 possible spoof viol 0 TCP state viol 0 out if not def/accl 0 bridge, src=dst 0 routing decision err 0 sanity checks failed 0 fwd to non-pivot 0 broadcast/multicast 0 cluster message 0 cluster forward 0 chain forwarding 0 F2V conn match pkts 0 general reason 0 route changes 0 |
Example: fwaccel stats -q
Example of statistics for notifications the SecureXL sent to the Firewall:
Notification Packets Notification Packets --------------------- -------------- --------------------- -------------- ntSAAboutToExpire 0 ntSAExpired 0 ntMSPIError 0 ntNoInboundSA 0 ntNoOutboundSA 0 ntDataIntegrityFailed 0 ntPossibleReplay 0 ntReplay 0 ntNextProtocolError 0 ntCPIError 0 ntClearTextPacket 0 ntFragmentation 0 ntUpdateUdpEncTable 0 ntSASync 0 ntReplayOutOfWindow 0 ntVPNTrafficReport 0 ntConnDeleted 0 ntConnUpdate 0 ntPacketDropped 0 ntSendLog 0 ntRefreshGTPTunnel 0 ntMcastDrop 0 ntAccounting 0 ntAsyncIndex 0 ntACkReordering 0 ntAccelAckInfo 0 ntMonitorPacket 0 ntPacketCapture 0 ntCpasPacketCapture 0 ntPSLGlueUpdateReject 0 ntSeqVerifyDrop 0 ntPacketForwardBefore 0 ntICMPMessage 0 ntQoSReclassifyPacket 0 ntQoSResumePacket 0 ntVPNEncHaLinkFailure 0 ntVPNEncLsLinkFailure 0 ntVPNEncRouteChange 0 ntVPNDecVerRouteChang 0 ntVPNDecRouteChange 0 ntMuxSimToFw 0 ntPSLEventLog 0 ntSendCPHWDStats 14871 ntPacketTaggingViolat 0 ntDosNotify 28 ntSynatkNotify 0 ntSynatkStats 0 ntQoSEventLog 0 ntPrintGetParam 0 |
Example: fwaccel stats -x
Example of statistics for PXL:
PXL Release Context statistics: Name Value Name Value ----------------------- ------------ ----------------------- ------------ End Handler 0 Post Sync 0 Stop Stream 0 kbuf fail 0 Set field failure 0 Notif set field fail 0 Non SYN seq fail 0 Tmpl kbuf fail 0 Tmpl set field fail 0 Segment Injection 0 Init app fail 0 Expiration 0 Newconn set field fail 0 Newconn fail 0 CPHWD dec 0 No PSL policy 0 PXL Exception statistics: Name Value Name Value ----------------------- ------------ ----------------------- ------------ urgent packets 0 invalid SYN retrans 0 SYN seq not init 0 old pkts out win 0 old pkts out win trunc 0 old pkts out win strip 0 new pkts out win 0 incorrect retrans 0 TCP pkts with bad csum 0 ACK unprocessed data 0 old ACK out win 0 Max segments reached 0 No resources 0 Hold timeout 0 |