Table of Contents
Advertisement
device. If you do not specify a card, this command displays IPv4 flood attack detection and
prevention statistics for all cards. (In IRF mode.)
count: Displays the number of matching protected IPv4 addresses.
Usage guidelines
The device collects statistics about protected IP addresses for flood attack detection and prevention.
The attackers' IP addresses are not recorded.
Examples
# (In standalone mode.) Display all IPv4 flood attack detection and prevention statistics.
<Sysname> display attack-defense flood statistics ip
slot 1:
IP address
201.55.7.44
192.168.11.4
slot 2:
IP address
192.168.100.66
# (In standalone mode.) Display the number of IPv4 addresses that are protected against flood
attacks.
<Sysname> display attack-defense flood statistics ip count
Slot 1:
Totally 2 flood entries.
Slot 2:
Totally 1 flood entries.
Table 74 Command output
Field
IP address
VPN
Detected on
Detect type
State
PPS
Dropped
Totally 2 flood entries
display attack-defense flood statistics ipv6
Use display attack-defense flood statistics ipv6 to display IPv6 flood attack detection and
prevention statistics.
Syntax
In standalone mode:
VPN
Detected on
--
Local
--
Local
VPN
Detected on
--
Local
Description
Protected IPv4 address.
MPLS L3VPN instance to which the protected IPv4 address belongs. If the
protected IPv4 address is on the public network, this field displays
hyphens (--).
Where the attack is detected: the device (Local).
Type of the detected flood attack.
Whether the device is attacked:
•
Attacked.
•
Normal.
Number of packets sent to the IPv4 address per second.
Number of attack packets dropped by the device.
Total number of IPv4 addresses that are protected.
Detect type
State
DNS-FLOOD
Normal
ACK-FLOOD
Normal
Detect type
State
SYN-ACK-FLOOD Normal
534
PPS
Dropped
1000
111111111
1000
22222222
PPS
Dropped
1000
165467998
Advertisement
Table of Contents
