Display Ipsec Statistics - H3C MSR 20-20 Command Reference Manual

2128 C 140: IPS
HAPTER EC

display ipsec statistics

Syntax
View
Parameter
Description
Related command:
Example
C C
ONFIGURATION OMMANDS
<Sysname> display ipsec session tunnel-id 5
------------------------------------------------------------
total sessions : 1
------------------------------------------------------------
tunnel-id : 5
session idle duration/total duration (sec) : 30/300
session flow :
Sour Addr : 12.12.12.2
Dest Addr : 13.13.13.2
Table 566 Description on the fields of the display ipsec session command
Field
total sessions
tunnel-id
session idle time
total duration
session flow
times matched
Sour Addr
Dest Addr
Sour Port
Dest Port
Protocol
display ipsec statistics
Any view
None
Use the
display ipsec statistics
reset ipsec statistics.
# Display IPSec packet statistics.
<Sysname> display ipsec statistics
the security packet statistics:
input/output security packets: 5124/8231
input/output security bytes: 52348/64356
input/output dropped security packets: 0/0
dropped security packet detail:
not enough memory: 0
can't find SA: 0
queue is full: 0
authentication has failed: 0
wrong length: 0
(4 times matched)
Description
Total number of IPSec sessions
IPSec tunnel ID, same as the connection-id of the IPSec SA
Idle duration of the IPSec session in seconds
Total duration of the IPSec session in seconds, defaulted to 300
seconds
Flow information of the IPSec session
Total number of packets matching the IPSec session
Source IP address of the IPSec session
Destination IP address of the IPSec session
Source port number of the IPSec session
Destination port number of the IPSec session
Protocol number of the IPSec protected data flow, for example, 1 for
ICMP
command to display IPSec packet statistics.
Sour Port: 0 Protocol : 1
Dest Port: 0 Protocol : 1