fwaccel synatk monitor

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

The "fwaccel synatk monitor" and "fwaccel6 synatk monitor" commands show the Accelerated SYN Defender status.

Important:

  • To enable the Accelerated SYN Defender in the Monitor (Detect only) mode on all interfaces, you must run the fwaccel synatk -m command.

  • In a Cluster, you must configure all the Cluster Members in the same way.

Syntax for IPv4

fwaccel synatk monitor

      -h

      [-p]

      [-p] -a

      [-p] -s

      [-p] -v

Syntax for IPv6

fwaccel6 synatk monitor

      -h

      [-p]

      [-p] -a

      [-p] -s

      [-p] -v

Parameters

Important - You can specify only one of these parameters: -a, -s, or -v.

Parameter

Description

-h

Shows the applicable built-in usage.

-p

Shows the Accelerated SYN Defender status for each SecureXL instance ("PPAK ID: 0" is the Host Security Appliance).

[-p] -a

Shows the Accelerated SYN Defender statistics for all interfaces (for each SecureXL instance).

[-p] -s

Shows the attack state in short form (for each SecureXL instance).

[-p] -v

Shows the attack state in verbose form (for each SecureXL instance).

Examples

[Expert@MyGW]# fwaccel synatk monitor
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                      Disabled |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| WAN             | External | Disable | Disable      | N/A       | N/A       |
| LAN1            | Internal | Disable | Disable      | N/A       | N/A       |
+-----------------------------------------------------------------------------+
[Expert@MyGW]#
[Expert@MyGW]# fwaccel synatk -m
[Expert@MyGW]#
[Expert@MyGW]# fwaccel synatk monitor
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                    Monitoring |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| WAN             | External | Detect  | Monitor      | 0         | 0         |
| LAN1            | Internal | Detect  | Monitor      | 0         | 0         |
+-----------------------------------------------------------------------------+
[Expert@MyGW]#
 
[Expert@MyGW]# fwaccel synatk monitor -p
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                    Monitoring |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| WAN             | External | Detect  | Monitor      | 0         | 0         |
| LAN1            | Internal | Detect  | Monitor      | 0         | 0         |
+-----------------------------------------------------------------------------+
 
PPAK ID: 0
----------
+-----------------------------------------------------------------------------+
| SYN Defender status                                                         |
+-----------------------------------------------------------------------------+
| Configuration                                                    Monitoring |
| Status                                                               Normal |
| Non established connections                                               0 |
| Global Threshold                                                      10000 |
| Interface Threshold                                                    5000 |
+-----------------------------------------------------------------------------+
| IF              | Topology | Enforce | State (sec)  | Non-established conns |
|                 |          |         |              | Peak      | Current   |
+-----------------------------------------------------------------------------+
| WAN             | External | Detect  | Monitor      | 0         | 0         |
| LAN1            | Internal | Detect  | Monitor      | 0         | 0         |
+-----------------------------------------------------------------------------+
[Expert@MyGW]#
 
[Expert@MyGW]# fwaccel synatk monitor -p -a
Global:
  status            attached
  nr_active                0
 
Firewall
----------
Per-interface:
                            WAN        LAN1
                      ----------  ----------
topology                External    Internal
state                    Monitor     Monitor
syn ready                      0           0
syn active prev                0           0
syn active curr                0           0
active_score                   0           0
msec grace                     0           0
msec active                    0           0
sent cookies                   0           0
fail validations               0           0
succ validations               0           0
early packets                  0           0
no conn data                   0           0
bogus syn                      0           0
peak non-estab                 0           0
int sent cookies               0           0
int succ validations           0           0
msec interval                  0           0
 
PPAK ID: 0
----------
Per-interface:
                            eth0        LAN1
                      ----------  ----------
topology                External    Internal
state                    Monitor     Monitor
syn ready                      0           0
syn active prev                0           0
syn active curr                0           0
active_score                   0           0
msec grace                     0           0
msec active                    0           0
sent cookies                   0           0
fail validations               0           0
succ validations               0           0
early packets                  0           0
no conn data                   0           0
bogus syn                      0           0
peak non-estab                 0           0
int sent cookies               0           0
int succ validations           0           0
msec interval                  0           0
[Expert@MyGW]#
 
[Expert@MyGW]# fwaccel synatk monitor -p -s
M,N,0,0
 
PPAK ID: 0
----------
M,N,0,0
[Expert@MyGW]#
 
[Expert@MyGW]# fwaccel synatk monitor -p -v
+-----------------------------------------------------------------------------+
| SYN Defender statistics                                                     |
+-----------------------------------------------------------------------------+
| Status                                                               Normal |
| Spoofed SYN/sec                                                           0 |
+-----------------------------------------------------------------------------+
 PPAK ID: 0
----------
+-----------------------------------------------------------------------------+
| SYN Defender statistics                                                     |
+-----------------------------------------------------------------------------+
| Status                                                               Normal |
| Spoofed SYN/sec                                                           0 |
+-----------------------------------------------------------------------------+
[Expert@MyGW]#