H3C IE4300 Command Reference Manual page 1679

name acl-name
string of 1 to 63 characters.
: Displays brief statistics.
brief
Usage guidelines
If
acl-number
filtering statistics for all ACLs.
To specify the IPv4 ACL type, do not specify the
Examples
# Display packet filtering statistics for all ACLs on incoming packets of GigabitEthernet 1/0/1.
<Sysname> display packet-filter statistics interface gigabitethernet 1/0/1 inbound
Interface: GigabitEthernet1/0/1
Inbound policy:
IPv4 ACL 2001, Hardware-count
From 2011-06-04 10:25:21 to 2011-06-04 10:35:57
rule 0 permit source 2.2.2.2 0 (2 packets)
rule 5 permit source 1.1.1.1 0 (Failed)
rule 10 permit vpn-instance test (No resource)
Totally 2 packets permitted, 0 packets denied
Totally 100% permitted, 0% denied
IPv6 ACL 2000
MAC ACL 4000
rule 0 permit
Table 2 Command output
Field
Interface
Inbound policy
Outbound policy
IPv4 ACL 2001
IPv4 ACL 2002 (Failed)
Hardware-count
Hardware-count (Failed)
From 2011-06-04 10:25:21 to
2011-06-04 10:35:57
2 packets
No resource
rule 5 permit source 1.1.1.1 0
(Failed)
Totally 2 packets permitted, 0
: Specifies an ACL by its name. The
, ,
name acl-name ipv6
Description
Interface to which the ACL applies.
ACL used for filtering incoming traffic.
ACL used for filtering outgoing traffic.
IPv4 basic ACL 2001 has been successfully applied.
The device has failed to apply IPv4 basic ACL 2002.
ACL rule match counting in hardware has been successfully enabled.
The device has failed to enable counting ACL rule matches in
hardware.
Start time and end time of the statistics. The start time is the time when
the packet filter was deployed to the member device.
Two packets matched the rule.
This field is not displayed when no packets matched the rule.
Resources are not enough for counting matches for the rule. In packet
filtering statistics, this field is displayed for a rule when resources are
not sufficient for rule match counting.
The device has failed to apply rule 5.
Number of packets permitted and denied by the ACL.
acl-name
, or is not specified, this command displays packet
mac
or keyword.
ipv6 mac
10
argument is a case-insensitive