HP 5120 SI series Command Reference Manual page 340

Parameters
tunnel-id integer: Specifies an IPsec tunnel by its ID, which is in the range 1 to 2000000000.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display ipsec statistics command to display IPsec packet statistics.
If you do not specify any parameters, the command displays the statistics for all IPsec packets.
Related commands: reset ipsec statistics.
Examples
# Display statistics on all IPsec packets.
<Sysname> display ipsec statistics
the security packet statistics:
input/output security packets: 47/62
input/output security bytes: 3948/5208
input/output dropped security packets: 0/45
dropped security packet detail:
not enough memory: 0
can't find SA: 45
queue is full: 0
authentication has failed: 0
wrong length: 0
replay packet: 0
packet too long: 0
wrong SA: 0
Table 53 Output description
Field
Connection ID
input/output security packets
input/output security bytes
input/output dropped security packets
dropped security packet detail
not enough memory
can't find SA
queue is full
Description
ID of the tunnel
Counts of inbound and outbound IPsec protected packets
Counts of inbound and outbound IPsec protected bytes
Counts of inbound and outbound IPsec protected packets that are
discarded by the device
Detailed information about inbound/outbound packets that get
dropped
Number of packets dropped due to lack of memory
Number of packets dropped due to finding no security association
Number of packets dropped due to full queues
329