Example Outputs on the "fwaccel stats" Commands
In the R81.10.X releases, this command is available starting from the R81.10.00 version.
Example: fwaccel stats -s
Example of statistics summary:
Accelerated conns/Total conns : 0/0 (0%) LightSpeed conns/Total conns : 0/0 (0%) Accelerated pkts/Total pkts : 0/87046 (0%) LightSpeed pkts/Total pkts : 0/87046 (0%) F2Fed pkts/Total pkts : 87046/87046 (100%) F2V pkts/Total pkts : 0/87046 (0%) Smart Accel pkts/Total pkts : 0/87046 (0%) CPASXL pkts/Total pkts : 0/87046 (0%) PSLXL pkts/Total pkts : 0/87046 (0%) CPAS pipeline pkts/Total pkts : 0/87046 (0%) PSL pipeline pkts/Total pkts : 0/87046 (0%) CPAS inline pkts/Total pkts : 0/87046 (0%) PSL inline pkts/Total pkts : 0/87046 (0%) QOS inbound pkts/Total pkts : 0/87046 (0%) QOS outbound pkts/Total pkts : 0/87046 (0%) Corrected pkts/Total pkts : 0/87046 (0%) |
Example: fwaccel stats
Example of the default output:
Name Value Name Value ---------------------------- ------------ ---------------------------- ------------ LightSpeed Accelerated Path -------------------------------------------------------------------------------------- hw accel inbound bytes 0 hw accel packets 0 hw accel outbound bytes 0 hw accel conns 0 hw accel total conns 0 hw accel tcp conns 0 hw accel non-tcp conns 0 Accelerated Path -------------------------------------------------------------------------------------- accel packets 0 accel bytes 0 outbound packets 0 outbound bytes 0 conns created 0 conns deleted 0 C total conns 0 C TCP conns 0 C non TCP conns 0 nat conns 0 dropped packets 0 dropped bytes 0 fragments received 0 fragments transmit 0 fragments dropped 0 fragments expired 0 IP options dropped 0 corrs created 0 corrs deleted 0 C corrections 0 corrected packets 0 corrected bytes 0 Smart Accel packets 0 Smart Accel bytes 0 Accelerated VPN Path -------------------------------------------------------------------------------------- C crypt conns 0 enc bytes 0 dec bytes 0 ESP enc pkts 0 ESP enc err 0 ESP dec pkts 0 ESP dec err 0 ESP other err 0 espudp enc pkts 0 espudp enc err 0 espudp dec pkts 0 espudp dec err 0 espudp other err 0 Medium Streaming Path -------------------------------------------------------------------------------------- CPASXL packets 0 PSLXL packets 0 CPASXL async packets 0 PSLXL async packets 0 CPASXL bytes 0 PSLXL bytes 0 C CPASXL conns 0 C PSLXL conns 0 CPASXL conns created 0 PSLXL conns created 0 PXL FF conns 0 PXL FF packets 0 PXL FF bytes 0 PXL FF acks 0 PXL no conn drops 0 Pipeline Streaming Path -------------------------------------------------------------------------------------- PSL Pipeline packets 0 PSL Pipeline bytes 0 CPAS Pipeline packets 0 CPAS Pipeline bytes 0 Inline Streaming Path -------------------------------------------------------------------------------------- PSL Inline packets 0 PSL Inline bytes 0 CPAS Inline packets 0 CPAS Inline bytes 0 Buffer Path -------------------------------------------------------------------------------------- Buffer path buffers 0 Buffer path bytes 0 TLS PARSER -------------------------------------------------------------------------------------- RECORD INFO 0 TLS DECRYPT -------------------------------------------------------------------------------------- TLS INSPECTION 0 TLS HANDSHAKE 0 TLS RECORD LAYER 0 TLS CRYPTO 0 HTTP DISP -------------------------------------------------------------------------------------- ACTIVATE WS MAIN 0 EXEC NO HTTP CMI CONTEXT 0 WS LITE -------------------------------------------------------------------------------------- WS TX COMPLETED 0 WS FORWARD TO MAIN 0 WS NOTIFY TIMEOUT 0 WS HANDLE EVENT 0 WS CHUNKED ERROR 0 WS GZIP EVENT 0 WS ADD MAC HEADER 0 WS IS STICKY ACTIVE 0 WS TIER1 JOB ERROR 0 WS TIER1 HAS MATCHES 0 CML MATCHES 0 TOTAL UPLOADED JOBS 0 TOTAL JOBS 0 ADVP -------------------------------------------------------------------------------------- ADVP FORW TO MAIN 0 ADVP HOLD TIMEOUT 0 QoS Paths -------------------------------------------------------------------------------------- QoS General Information: ------------------------ Total QoS Conns 0 QoS Classify Conns 0 QoS Classify flow 0 Reclassify QoS policy 0 FireWall QoS Path: ------------------ Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 Accelerated QoS Path: --------------------- Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 Firewall Path -------------------------------------------------------------------------------------- F2F packets 81655 F2F bytes 9455826 TCP violations 0 F2V conn match pkts 0 F2V packets 0 F2V bytes 0 GTP -------------------------------------------------------------------------------------- gtp tunnels created 0 gtp tunnels 0 gtp accel pkts 0 gtp f2f pkts 0 gtp spoofed pkts 0 gtp in gtp pkts 0 gtp signaling pkts 0 gtp tcpopt pkts 0 gtp apn err pkts 0 General -------------------------------------------------------------------------------------- memory used 4384 C tcp handshake conns 0 C tcp established conns 0 C tcp closed conns 0 C tcp pxl handshake conns 0 C tcp pxl established conns 0 C tcp pxl closed conns 0 DNS DoR stats 0 (*) Statistics marked with C refer to current value, others refer to total value |
Example: fwaccel stats -c
Example of statistics for Cluster Correction:
Cluster Correction stats: Name Value Name Value ----------------------- ------------ ----------------------- ------------ Sent pkts (total) 0 Sent with metadata 0 Received pkts (total) 0 Received with metadata 0 Sent bytes 0 Received bytes 0 Send errors 0 Receive errors 0 Fragment pkts (total) 0 Send ICMP Errors pkts (t 0 Send ICMP Errors bytes ( 0 Send WRP pkts (total) 0 Send WRP bytes (total) |
Example: fwaccel stats -d
Example of statistics for drops from device:
Reason Value Reason Value -------------------- --------------- -------------------- --------------- General 0 CPASXL Decision 0 PSLXL Decision 0 Clear Packet on VPN 0 Encryption Failed 0 Drop Template 0 Decryption Failed 0 Interface Down 0 Cluster Error 0 XMT Error 0 Anti-Spoofing 0 Local Spoofing 0 Sanity Error 0 Monitored Spoofed 0 QoS Decision 0 QoS LLQ Decision 0 C2S Violation 0 S2C Violation 0 Loop Prevention 0 DOS Fragments 0 DOS IP Options 0 DOS Deny Lists 0 DOS Penalty Box 0 DOS Rate Limiting 0 Syn Attack 0 Reorder 0 Virt Defrag Timeout 0 MAC filtering 0 Anti ARP Spoofing 0 Invalid Interface 0 Null Routing info 0 Unable to get out ifn 0 Resource exhausted 0 Conn not found 0 Failed to del corr 0 Corr instead of conn 0 Del zombie conn fail 0 FW UUID no match 0 Offload mismatch 0 SIM init failed 0 Null stream init info 0 Unable to get CGNAT 0 Null stream app info 0 Failed get init info 0 SIM add stream failed 0 Collid conn not found 0 Del collid conn fail 0 Add conn after collid 0 SEQ valid 0 Enqueue QoS failed 0 AUX CI null 0 Link dead 0 VPN packet too big 0 NAT64 failed 0 NAT46 failed 0 Packet > MTU 0 NAC validation 0 TCP state violation 0 Enforce packet 0 GTP check packet 0 Bridge route error 0 Route ifn changed 0 IP forwarding 0 Copy MACS failed 0 Fragments Drops 0 Send Notification 0 Conn not found RST 0 Forward to PPAK fail 0 Cluster forward fail 0 F2F before encrypt 0 Forward dst encrypt 0 Correction I/S fail 0 Do inbound F2F 0 Packet UDP failed 0 F2F not allowed 0 Do routing 0 Fanout won't F2F 0 SCTP validation fail 0 SCTP not data 0 Invalid TCP option 0 Invalid MSS option 0 Invalid MSS value 0 Invalid window scale 0 Invalid IP option 0 Invalid Ext header 0 Resume from Host err 0 Invalid ethertype |
Example: fwaccel stats -l
Example of the output in legacy mode (as one table):
Name Value Name Value ---------------------------- ------------ ---------------------------- ------------ Error - shouldn't happen 0 hw accel inbound bytes 0 hw accel packets 0 hw accel outbound bytes 0 hw accel conns 0 hw accel total conns 0 hw accel tcp conns 0 hw accel non-tcp conns 0 accel packets 0 accel bytes 0 outbound packets 0 outbound bytes 0 conns created 0 conns deleted 0 dropped packets 0 dropped bytes 0 fragments received 0 fragments transmit 0 fragments dropped 0 fragments expired 0 IP options dropped 0 corrs created 0 corrs deleted 0 C corrections 0 corrected packets 0 corrected bytes 0 C crypt conns 0 enc bytes 0 dec bytes 0 ESP enc pkts 0 ESP enc err 0 ESP dec pkts 0 ESP dec err 0 ESP other err 0 espudp enc pkts 0 espudp enc err 0 espudp dec pkts 0 espudp dec err 0 espudp other err 0 acct update interval 3600 CPASXL packets 0 PSLXL packets 0 CPASXL async packets 0 PSLXL async packets 0 CPASXL bytes 0 PSLXL bytes 0 CPASXL conns created 0 PSLXL conns created 0 PXL FF conns 0 PXL FF packets 0 PXL FF bytes 0 PXL FF acks 0 PXL no conn drops 0 PSL Pipeline packets 0 PSL Pipeline bytes 0 CPAS Pipeline packets 0 CPAS Pipeline bytes 0 PSL Inline packets 0 PSL Inline bytes 0 CPAS Inline packets 0 CPAS Inline bytes 0 Buffer path buffers 0 Buffer path bytes 0 RECORD INFO 0 TLS INSPECTION 0 TLS HANDSHAKE 0 TLS RECORD LAYER 0 TLS CRYPTO 0 ACTIVATE WS MAIN 0 EXEC NO HTTP CMI CONTEXT 0 WS TX COMPLETED 0 WS FORWARD TO MAIN 0 WS NOTIFY TIMEOUT 0 WS HANDLE EVENT 0 WS CHUNKED ERROR 0 WS GZIP EVENT 0 WS ADD MAC HEADER 0 WS IS STICKY ACTIVE 0 WS TIER1 JOB ERROR 0 WS TIER1 HAS MATCHES 0 CML MATCHES 0 TOTAL UPLOADED JOBS 0 TOTAL JOBS 0 ADVP FORW TO MAIN 0 ADVP HOLD TIMEOUT 0 QoS Classify Conns 0 QoS Classify flow 0 Reclassify QoS policy 0 Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 Enqueued IN packets 0 Enqueued OUT packets 0 Dequeued IN packets 0 Dequeued OUT packets 0 Enqueued IN bytes 0 Enqueued OUT bytes 0 Dequeued IN bytes 0 Dequeued OUT bytes 0 F2F packets 83174 F2F bytes 9629200 TCP violations 0 F2V conn match pkts 0 F2V packets 0 F2V bytes 0 gtp tunnels created 0 gtp tunnels 0 gtp accel pkts 0 gtp f2f pkts 0 gtp spoofed pkts 0 gtp in gtp pkts 0 gtp signaling pkts 0 gtp tcpopt pkts 0 gtp apn err pkts 0 memory used 4384 C tcp handshake conns 0 C tcp established conns 0 C tcp closed conns 0 C tcp pxl handshake conns 0 C tcp pxl established conns 0 C tcp pxl closed conns 0 DNS DoR stats 0 Smart Accel packets 0 Smart Accel bytes 0 C total conns 0 C TCP conns 0 C non TCP conns 0 C CPASXL conns 0 Total QoS Conns 0 nat conns 0 C PSLXL conns 0 (*) Statistics marked with C refer to current value, others refer to total value |
Example: fwaccel stats -m
Example of statistics for multicast traffic:
Name Value Name Value -------------------- --------------- -------------------- --------------- in packets 0 out packets 0 if restricted 0 conns with down if 0 f2f packets 0 f2f bytes 0 dropped packets 0 dropped bytes 0 accel packets 0 accel bytes 0 mcast conns |
Example: fwaccel stats -n
Example of statistics for Identity Awareness (NAC):
Name Value Name Value -------------------- --------------- -------------------- --------------- NAC packets 0 NAC bytes 0 NAC connections 0 compliance failure 0 |
Example: fwaccel stats -o
Example of statistics for Reorder Infrastructure:
Application: F2V
Statistic Value
----------------------------------- --------------------
Queued pkts 0
Max queued pkts 0
Timer triggered 0
Callback unhold 0
Callback drop all packets 0
Callback ERROR drop all packets 0
Callback drop first packet 0
Callback handling reset 0
Dequeued pkts resumed 0
Queue ent allocated 0
Queue ent freed 0
Queues allocated 0
Queues freed 0
Ack notif sent 0
Ack response handling 0
Dequeued pkts dropped 0
Reached max queued pkt limit 0
Set timer failed 0
Error already held 0
Queue ent alloc failed 0
Queue alloc failed 0
Ack notif failed 0
Ack response handling failed 0
No memory 0
----------------------------------------------------
Application: Route
Statistic Value
----------------------------------- --------------------
Queued pkts 0
Max queued pkts 0
Timer triggered 0
Callback unhold 0
Callback drop all packets 0
Callback ERROR drop all packets 0
Callback drop first packet 0
Callback handling reset 0
Dequeued pkts resumed 0
Queue ent allocated 0
Queue ent freed 0
Queues allocated 0
Queues freed 0
Ack notif sent 0
Ack response handling 0
Dequeued pkts dropped 0
Reached max queued pkt limit 0
Set timer failed 0
Error already held 0
Queue ent alloc failed 0
Queue alloc failed 0
Ack notif failed 0
Ack response handling failed 0
No memory 0
----------------------------------------------------
Application: New Connection
Statistic Value
----------------------------------- --------------------
Queued pkts 0
Max queued pkts 0
Timer triggered 0
Callback unhold 0
Callback drop all packets 0
Callback ERROR drop all packets 0
Callback drop first packet 0
Callback handling reset 0
Dequeued pkts resumed 0
Queue ent allocated 0
Queue ent freed 0
Queues allocated 0
Queues freed 0
Ack notif sent 0
Ack response handling 0
Dequeued pkts dropped 0
Reached max queued pkt limit 0
Set timer failed 0
Error already held 0
Queue ent alloc failed 0
Queue alloc failed 0
Ack notif failed 0
Ack response handling failed 0
No memory 0
----------------------------------------------------
Application: F2P
Statistic Value
----------------------------------- --------------------
Queued pkts 0
Max queued pkts 0
Timer triggered 0
Callback unhold 0
Callback drop all packets 0
Callback ERROR drop all packets 0
Callback drop first packet 0
Callback handling reset 0
Dequeued pkts resumed 0
Queue ent allocated 0
Queue ent freed 0
Queues allocated 0
Queues freed 0
Ack notif sent 0
Ack response handling 0
Dequeued pkts dropped 0
Reached max queued pkt limit 0
Set timer failed 0
Error already held 0
Queue ent alloc failed 0
Queue alloc failed 0
Ack notif failed 0
Ack response handling failed 0
No memory 0
----------------------------------------------------
|
Example: fwaccel stats -p
Example of statistics for SecureXL violations (F2F packets):
F2F packets: -------------- Violation Packets Violation Packets -------------------- --------------- -------------------- --------------- Pkt has IP options 0 ICMP miss conn 2001 TCP-SYN miss conn 1 TCP-other miss conn 385 UDP miss conn 712 Other miss conn 0 VPN returned F2F 0 Uni-directional viol 0 Possible spoof viol 0 TCP state viol 0 SCTP state affecting 0 Out if not def/accl 0 Bridge src=dst 0 Routing decision err 0 Sanity checks failed 0 Fwd to non-pivot 0 Broadcast/multicast 0 Cluster message 448668 Cluster forward 0 Chain forwarding 0 F2V conn match pkts 0 General reason 0 Route changes 0 VPN multicast traffic 0 GTP non-accelerated 0 Unresolved nexthop 0 |
Example: fwaccel stats -q
Example of statistics for notifications the SecureXL sent to the Firewall:
Notification Packets Notification Packets --------------------- -------------- --------------------- -------------- ntSAAboutToExpire 0 ntSAExpired 0 ntMSPIError 0 ntNoInboundSA 0 ntNoOutboundSA 0 ntDataIntegrityFailed 0 ntPossibleReplay 0 ntReplay 0 ntNextProtocolError 0 ntCPIError 0 ntClearTextPacket 0 ntFragmentation 0 ntUpdateUdpEncTable 0 ntSASync 0 ntReplayOutOfWindow 0 ntVPNTrafficReport 0 ntConnDeleted 0 ntConnUpdate 0 ntPacketDropped 0 ntSendLog 0 ntRefreshGTPTunnel 0 ntMcastDrop 0 ntAccounting 0 ntAsyncIndex 0 ntACkReordering 0 ntAccelAckInfo 0 ntPacketCapture 0 ntCpasPacketCapture 0 ntPSLGlueUpdateReject 0 ntSeqVerifyDrop 0 ntPacketForwardBefore 0 ntICMPMessage 0 ntQoSReclassifyPacket 0 ntQoSResumePacket 0 ntVPNEncHaLinkFailure 0 ntVPNEncLsLinkFailure 0 ntVPNEncRouteChange 0 ntVPNEncVisitorMode 0 ntVPNEncSdwanTransInv 0 ntVPNDecVerRouteChang 0 ntVPNDecRouteChange 0 ntVPNDecVerMSPI 0 ntMuxSimToFw 0 ntPSLEventLog 0 ntSendCPHWDStats 1637 ntPacketTaggingViolat 0 ntDosNotify 0 ntSynatkNotify 0 ntSynatkStats 0 ntQoSEventLog 0 ntMuxSendLog 0 ntFwdForEncrypt 0 ntUpdateAccelIf 0 ntSDWShortcutProbeRep 0 ntArpSpoof 0 ntArpSpoofLog 0 |
Example: fwaccel stats -t
Example of statistics for SecureXL traffic distribution:
F2Fed bytes/Total bytes : 10665862/10665862 (100%) F2V bytes/Total bytes : 0/10665862 (0%) Smart Accel bytes/Total bytes : 0/10665862 (0%) Medium path bytes/Total bytes : 0/10665862 (0%) Pipeline path bytes/Total bytes : 0/10665862 (0%) Inline path bytes/Total bytes : 0/10665862 (0%) Buffer path bytes/Total inline bytes: 0/0 (0%) |
Example: fwaccel stats -u
Example of statistics for SecureXL callqueue:
App Value App Value -------------------- --------------- -------------------- --------------- F2F 0 Send Packet 0 Send Buffer 0 TCP State Update 0 End Session Timeout 0 Synatk Syn Packet 0 Synatk Ack Packet 0 QoS 0 Async Opaque Resume 0 Holding Queue 0 FEC recovered 0 Packet Resume 0 Cpas Mloop 0 PM Resume 0 PM Commit 0 Dummy packet 0 Memory Usage Bytes 0 Summary -------------------- Deny list RST packet 0 |
Example: fwaccel stats -x
Example of statistics for PXL:
PXL Release Context statistics: Name Value Name Value ----------------------- ------------ ----------------------- ------------ End Handler 0 Post Sync 0 Stop Stream 0 kbuf fail 0 Set field failure 0 Notif set field fail 0 Non SYN seq fail 0 Tmpl kbuf fail 0 Tmpl set field fail 0 Segment Injection 0 Init app fail 0 Expiration 0 Newconn set field fail 0 Newconn fail 0 CPHWD dec 0 No PSL policy 0 PXL Exception statistics: Name Value Name Value ----------------------- ------------ ----------------------- ------------ urgent packets 0 invalid SYN retrans 0 SYN seq not init 0 old pkts out win 0 old pkts out win trunc 0 old pkts out win strip 0 new pkts out win 0 incorrect retrans 0 TCP pkts with bad csum 0 ACK unprocessed data 0 old ACK out win 0 Max segments reached 0 No resources 0 Hold timeout 0 |