Juniper IDP OS 5.1R1 - RELEASE NOTES REV 1 Release Note page 19

Table 5: Known Issues (continued)
PR Description
575772 SNMP: For IDP8200 only, the values reported for the following MIB objects are incorrect:
jnxIdpSensorFreePktBuffersFiveSec.0
jnxIdpSensorFreePktBuffersOneMin.0
jnxIdpSensorPktsRxdPerIntfcTable
jnxIdpSensorPktsTxRatePerIntfcTable
jnxIdpSensorPktsDropOnAllIntfc.0
jnxIdpSensorSignatureStatsTable
jnxIdpSensorTopTenSignatureStatsTable
As a workaround, you can use NSM and IDP Reporter top attack reports to see the data for signature matches.
You can log into the CLI and use the
statistics. For example:
[root@defaulthost ~]# jnetStats
../../jnetLib.c built on Dec 20 2010 at 23:05:51 with PRODUCTION build of SALEEN
-43e.
-- Worker Id 0 Stats:
freePackets:
dropCount:
-- Thread Id 0 Stats:
rxPackets:
rxBytes:
rxOverflow:
rxQueued:
txComplete:
txCompleteBytes:
allocQueueSize:
txPackets:
txBytes:
-- Device Id
Link Status:
rxPackets:
rxBytes:
rxOverflow:
txPackets:
txBytes:
[...]
High Availability
550567 Synchronization from primary device to backup device includes updates to the application identification matches
for predefined signatures (the appsig cache). Updates do not include cached entries for custom applications
or extended applications (the extappsig cache).
558837 Due to a hardware limitation, interface signaling is not supported for IDP8200 10 gigabyte fiber interfaces.
559087 We do not support attack detection (flow-based or packet-based) in synced sessions processed by the standby
device after retransmission on the redundant path. Packets for these sessions are passed through, uninspected.
New sessions traversing the redundant path are inspected.
Copyright © 2011, Juniper Networks, Inc.
command to retrieve packet buffer and packet transmission
jnetStats
444032
0
20846535763
14757418499789
0
0
18487802326
14691015670286
1023
18487802326
14692307273740
0 (eth2) Stats:
Down
0
0
0
0
0
Known Issues
19