HP VPN Firewall Appliances Attack Protection Command Reference

54
TCP attack protection commands
display tcp status
Use display tcp status to display status of all TCP connections for monitoring TCP connections.
Syntax
display tcp status [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Getting Started Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display status of all TCP connections.
<Sysname> display tcp status
*: TCP MD5 Connection
TCPCB Local Add:port Foreign Add:port State
03e37dc4 0.0.0.0:4001 0.0.0.0:0 Listening
04217174 100.0.0.204:23 100.0.0.253:65508 Established
Table 9 Command output
Field Descri
p
tion
*: TCP MD5 Connection
If the status information about a TCP connection contains an asterisk (*), the TCP
adopts the MD5 algorithm for authentication.
TCPCB TCP control block.
Local Add:port Local IP address and port number.
Foreign Add:port Remote IP address and port number.
State State of the TCP connection.
tcp anti-naptha enable
Use tcp anti-naptha enable to enable the protection against Naptha attack.