Ikesnoop - D-Link DFL-1600 User Manual

-- ifstat <interface>
Shows hardware and software statistics for the specified
NIC.
Example:
Cmd> ifstat lan
Iface lan
...
MTU :
IP Address : ...
Hw Address : ...
Software Statistics:
Soft received: ... Soft sent:
Dropped:
Driver information / hardware statistics:
...
The Dropped counter in the software section states the number of packets
discarded as the result of structural integrity tests or firewall ruleset drops.
The IP Input Errs counter in the software section specifies the number of
packets discarded due to checksum errors or IP headers broken beyond
recognition. The latter is most likely the result of local network problems
rather than remote attacks.

Ikesnoop

Ikesnoop is used to diagnose problems with IPsec tunnels.
Syntax:
-- ikesnoop
Display current ikesnoop status.
-- ikesnoop off
Turn IKE snooping off.
-- ikesnoop on [ipaddr]
Turn IKE snooping on, if a IP is specified only ike
traffic from that IP will be showed.
-- ikesnoop verbose [ipaddr]
Enable verbose output, if a IP is specified only ike
traffic from that IP will be showed.
...
... IP Input Errs: ...
D-Link Firewalls User's Guide
... Send failures: ...
325