Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 482

Gathering Information
sensor#
Display the statistics for AnalysisEngine:
Step 3
sensor# show statistics analysis-engine
Analysis Engine Statistics
Number of seconds since service started = 1999
Measure of the level of current resource utilization = 0
Measure of the level of maximum resource utilization = 0
The rate of TCP connections tracked per second = 0
The rate of packets per second = 0
The rate of bytes per second = 13
Receiver Statistics
Transmitter Statistics
Fragment Reassembly Unit Statistics
TCP Stream Reassembly Unit Statistics
The Signature Database Statistics.
Statistics for Signature Events
Statistics for Actions executed on a SigEvent
sensor#
Display the statistics for authentication:
Step 4
sensor# show statistics authentication
General
totalAuthenticationAttempts = 2
failedAuthenticationAttempts = 0
sensor#
Step 5 Display the statistics for the denied attackers in the system:
sensor# show statistics denied-attackers
Denied Attackers and hit count for each.
sensor#
Step 6 Display the statistics for the event server:
sensor# show statistics event-server
General
openSubscriptions = 0
blockedSubscriptions = 0
Subscriptions
sensor#
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
C-56
Sig 2156 = 486
Total number of packets processed since reset = 290
Total number of IP packets processed since reset = 12
Total number of packets transmitted = 290
Total number of packets denied = 0
Total number of packets reset = 0
Number of fragments currently in FRU = 0
Number of datagrams currently in FRU = 0
TCP streams currently in the embryonic state = 0
TCP streams currently in the established state = 0
TCP streams currently in the closing state = 0
TCP streams currently in the system = 0
TCP Packets currently queued for reassembly = 0
Total nodes active = 0
TCP nodes keyed on both IP addresses and both ports = 0
UDP nodes keyed on both IP addresses and both ports = 0
IP nodes keyed on both IP addresses = 0
Number of SigEvents since reset = 491
Number of Alerts written to the IdsEventStore = 11
Appendix C Troubleshooting
78-16527-01