Quick Reference Guide

1010 PowerConnect B-Series TI24X Configuration Guide
53-1002269-02
Protecting against TCP SYN attacks
31
Syntax: show statistics dos-attack
To clear statistics about ICMP and TCP SYN packets dropped because burst thresholds were
exceeded,enter the following command.
PowerConnect# clear statistics dos-attack
Syntax: clear statistics dos-attack
Displaying statistics about packets dropped because of
DoS attacks in PowerConnect devices
To display information about ICMP and TCP SYN packets dropped because burst thresholds were
exceeded,enter the following command.
Syntax: show statistics dos-attack
Table 164 defines the fields in the output command.
TABLE 164 Output of show statistics dos-attack command
.
PowerConnect# show statistics dos-attack
------------------------ Local Attack Statistics --------------------------------------
ICMP TCP-SYN
------------------------------ --------------------------------------------------
Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count
----------- ------------ ------------ ------------ ------------ -------------------
0 0 0 0 0 0
--------------------------Transit Attack Statistics ------------------------------------
ICMP TCP-SYN
--------------------------------------------------- -----------------------------------
Port/VE Dropped pkts Blocked pkts Lockup Count Dropped pkts Blocked pkts Lockup Count
------- ------------ ------------ ------------ ------------ ------------ ------------
25 76 1754 2 0 0 0
Table 0.10:
This field.. Displays
Dropped pkts Displays the number of packets dropped due to exceeding the configured burst-normal rate.
Blocked pkt Displays the number of packets dropped due to exceeding the configured burst-max rate.
Lockup Count Displays the number of times a port or VE is locked down for ICMP or TCP-SYN packets.