Cisco ASA Series Cli Configuration Manual page 256

Monitoring Security Contexts
Monitor SYN attacks using the following commands:
Command
show perfmon
show resource usage detail
show resource usage summary detail
The following is sample output from the show perfmon command that shows the rate of TCP intercepts
for a context called admin.
hostname/admin# show perfmon
Context:admin
PERFMON STATS:
Xlates
Connections
TCP Conns
UDP Conns
URL Access
URL Server Req
WebSns Req
TCP Fixup
HTTP Fixup
FTP Fixup
AAA Authen
AAA Author
AAA Account
TCP Intercept
The following is sample output from the show resource usage detail command that shows the amount
of resources being used by TCP Intercept for individual contexts. (Sample text in bold shows the TCP
intercept information.)
hostname(config)# show resource usage detail
Resource
memory
chunk:channels
chunk:fixup
chunk:hole
chunk:ip-users
chunk:list-elem
chunk:list-hdr
chunk:route
chunk:static
tcp-intercepts
np-statics
statics
ace-rules
console-access-rul
fixup-rules
memory
chunk:channels
chunk:dbgtrace
chunk:fixup
chunk:global
chunk:hole
chunk:ip-users
chunk:udp-ctrl-blk
Cisco ASA Series CLI Configuration Guide
1-36
Purpose
Monitors the rate of attacks for individual contexts.
Monitors the amount of resources being used by TCP intercept for
individual contexts.
Monitors the resources being used by TCP intercept for the entire system.
Current Average
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
0/s 0/s
322779/s 322779/s
Current Peak
843732 847288
14
15
1
10
21
3
2
1
328787 803610
3
1
1
2
14
959872 960000
15
1
15
1
2
10
1
Chapter 1 Configuring Multiple Context Mode
Limit Denied Context
unlimited
15 unlimited
15 unlimited
1 unlimited
10 unlimited
21 unlimited
4 unlimited
2 unlimited
1 unlimited
unlimited
3 unlimited
1 unlimited
1 unlimited
2 unlimited
15 unlimited
unlimited
16 unlimited
1 unlimited
15 unlimited
1 unlimited
2 unlimited
10 unlimited
1 unlimited
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 admin
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1
0 c1