Login
- Table of Contents
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 05-IP Performance Commands | 135.55 KB |
Chapter 1 IP Performance Configuration Commands
1.1 IP Performance Configuration Commands
1.1.14 display icmp statistics
1.1.20 ip forward-broadcast (interface view)
1.1.21 ip forward-broadcast (system view)
Chapter 1 IP Performance Configuration Commands
1.1 IP Performance Configuration Commands
1.1.1 debugging fib errmsg
Syntax
debugging fib errmsg
undo debugging fib errmsg
View
User view
Default Level
1: Monitor level
Parameters
None
Description
Use the debugging fib errmsg command to enable FIB error debugging.
Use the undo debugging fib errmsg command disable FIB error debugging.
By default, FIB error debugging is disabled.
Examples
# Enable FIB error debugging.
<Sysname> terminal debugging
<Sysname> debugging fib errmsg
1.1.2 debugging fib synmsg
Syntax
debugging fib synmsg
undo debugging fib synmsg
View
User view
Default Level
1: Monitor level
Parameters
None
Description
Use the debugging fib synmsg command to enable debugging for FIB entry synchronization information.
Use the undo debugging fib synmsg command to disable debugging for FIB entry synchronization information.
By default, debugging is disabled for FIB entry synchronization information.
Examples
# Enable debugging for FIB entry synchronization information.
<Sysname> terminal debugging
<Sysname> debugging fib synmsg
1.1.3 debugging fib rtmsg
Syntax
debugging fib rtmsg
undo debugging fib rtmsg
View
User view
Default Level
1: Monitor level
Parameters
None
Description
Use the debugging fib rtmsg command to enable FIB entry operation debugging.
Use the undo debugging fib rtmsg command to disable FIB entry operation debugging.
By default, FIB entry operation debugging is disabled.
Examples
# Enable FIB entry operation debugging.
<Sysname> terminal debugging
<Sysname> debugging fib rtmsg
1.1.4 debugging ip error
Syntax
debugging ip error
undo debugging ip error
View
User view
Default Level
1: Monitor level
Parameters
None
Description
Use the debugging ip error command to enable IP forwarding error debugging.
Use the undo debugging ip error command to disable IP forwarding error debugging.
By default, IP forwarding error debugging is disabled.
Examples
# Enable IP forwarding error debugging.
<Sysname> terminal debugging
<Sysname> debugging ip error
1.1.5 debugging ip icmp
Syntax
debugging ip icmp
undo debugging ip icmp
View
User view
Default Level
1: Monitor level
Parameters
None
Description
Use the debugging ip icmp command to enable ICMP debugging.
Use the undo debugging ip icmp command to disable ICMP debugging.
By default, ICMP debugging is disabled.
Table 1-1 Description on fields of the debugging ip icmp command
|
Field |
Description |
|
ICMP Send |
Operation of sending ICMP packets |
|
ICMP Receive |
Operation of receiving ICMP packets |
|
Type |
ICMP packet type |
|
Code |
ICMP packet code |
|
Src |
Source IP address |
|
Dst |
Destination IP address |
Examples
# Enable ICMP debugging and execute a ping operation.
<Sysname> terminal debugging
<Sysname> debugging ip icmp
<Sysname> ping 10.1.1.2
*Dec 30 11:18:36:659 2006 Sysname IPDBG/7/debug_icmp:
ICMP Send: echo(Type=8, Code=0), Dst = 10.1.1.2
// An ICMP packet with destination IP address 10.1.1.2 is sent.
*Dec 30 11:18:37:789 2006 Sysname IPDBG/7/debug_icmp:Slot=3;
ICMP Receive: echo-reply(Type=0, Code=0), Src = 10.1.1.2, Dst = 10.1.1.1
// An ICMP packet with source IP address 10.1.1.2 and destination IP address 10.1.1.1 is received.
1.1.6 debugging ip packet
Syntax
debugging ip packet [ acl acl-number ]
undo debugging ip packet
View
User view
Default Level
1: Monitor level
Parameters
acl-number: ACL number, specifying an ACL to match specific IP packets for which debugging information is displayed.
Description
Use the debugging ip packet command to enable IP packet debugging.
Use the undo debugging ip packet command to disable IP packet debugging.
By default, IP packet debugging is disabled.
Table 1-2 Description on fields of the debugging ipv6 packet command
|
Field |
Description |
|
Sending |
Operation of sending packets |
|
Receiving |
Operation of receiving packets |
|
Delivering |
The packet is delivered from the IP layer to the upper layer |
|
interface |
Receiving/transmitting interface |
|
version |
IP protocol version |
|
headlen |
Length of the packet header |
|
tos |
Type of service |
|
pktlen |
Total length of the packet |
|
pktid |
Packet identifier |
|
offset |
Offset |
|
ttl |
TTL |
|
protocol |
Protocol |
|
checksum |
Checksum |
|
s |
Source IP address |
|
d |
Destination IP address |
|
prompt |
Prompt message |
Examples
# Enable IP packet debugging and execute a ping operation.
<Sysname> terminal debugging
<Sysname> debugging ip packet
<Sysname> ping 10.1.1.2
*Dec 30 11:19:11:661 2006 Sysname IPFWD/7/debug_case:
Sending, interface = Vlan-interface100, version = 4, headlen = 20, tos = 0,
pktlen = 84, pktid = 2521, offset = 0, ttl = 255, protocol = 1,
checksum = 39883, s = 10.1.1.1, d = 10.1.1.2
prompt: Sending the packet from local at Vlan-interface100
// The packet is sent.
*Dec 30 11:19:11:925 2006 Sysname IPFWD/7/debug_case:Slot=4;
Receiving, interface = Vlan-interface100, version = 4, headlen = 20, tos = 0,
pktlen = 84, pktid = 2525, offset = 0, ttl = 255, protocol = 1,
checksum = 39879, s = 10.1.1.2, d = 10.1.1.1
prompt: Receiving IP packet from Vlan-interface100
// The packet is received.
*Dec 30 11:19:12:301 2006 Sysname IPDBG/7/debug_case:Slot=4;
Delivering, interface = Vlan-interface100, version = 4, headlen = 20, tos = 0,
pktlen = 84, pktid = 2525, offset = 0, ttl = 255, protocol = 1,
checksum = 39879, s = 10.1.1.2, d = 10.1.1.1
prompt: IP packet is delivering up!
// The received packet is delivered to the upper layer for processing.
1.1.7 debugging tcp event
Syntax
debugging tcp event [ task-id socket-id slot-number ]
undo debugging tcp event [ task-id socket-id slot-number ]
View
User view
Default Level
1: Monitor level
Parameters
task-id: Task ID.
socket-id: Socket ID.
slot-number: Slot number.
Description
Use the debugging tcp event command to enable TCP event debugging.
Use the undo debugging tcp event command to disable TCP event debugging.
By default, TCP event debugging is disabled.
Table 1-3 Description on fields of the debugging tcp event command
|
Field |
Description |
|
task |
Task ID for establishing a TCP connection |
|
socketid |
Socket ID for establishing a TCP connection |
|
state |
TCP connection state |
|
received MSS |
Maximum segment size (MSS) that the peer end advertises to the local end |
|
LA |
Local IP address and port number |
|
FA |
Peer IP address and port number |
|
advertising |
Maximum segment size that the local end advertises to the peer end |
Examples
# Enable telnet server.
<Sysname> system-view
[Sysname] telnet server enable
# Create a VTY user.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] authentication-mode none
[Sysname-ui-vty0-4] user privilege level 3
# Enable TCP event debugging.
<Sysname> terminal debugging
<Sysname> debugging tcp event
# Telnet to the local device from another device. The debugging information on the local device is displayed as follows.
*Dec 30 11:19:50:967 2006 Sysname SOCKET/7/TCP EVENT:
1141227210: task = VTYD(38), socketid = 0,
TCPCB 0x06af1204 created
// A TCP control block is created.
*Dec 30 11:19:51:111 2006 Sysname SOCKET/7/TCP EVENT:
1141227210: task = VTYD(38), socketid = 0,
state Closed changed to Listening
// The TCP connection state is changed from Closed to Listening.
*Dec 30 11:19:51:270 2006 Sysname SOCKET/7/TCP EVENT:
1141227210: task = VTYD(38), socketid = 0,
received MSS = 1460,
LA = 10.1.1.1:23, FA = 10.1.1.2:1025
// The local end receives the MSS advertised by the peer end.
*Dec 30 11:19:51:460 2006 Sysname SOCKET/7/TCP EVENT:
1141227210: task = VTYD(38), socketid = 0,
state Listening changed to Syn_Rcvd
// The TCP connection state is changed from Listening to Syn_Rcvd.
*Dec 30 11:19:51:620 2006 Sysname SOCKET/7/TCP EVENT:
1141227210: task = VTYD(38), socketid = 0,
advertising MSS = 1460,
LA = 10.1.1.1:23, FA = 10.1.1.2:1025
// The local end advertises the MSS to the peer end.
*Dec 30 11:19:51:820 2006 Sysname SOCKET/7/TCP EVENT:
1141227210: task = VTYD(38), socketid = 3,
state Syn_Rcvd changed to Established
// The TCP connection state is changed from Syn_Rcvd to Established.
1.1.8 debugging tcp md5
Syntax
debugging tcp md5
undo debugging tcp md5
View
User view
Default Level
1: Monitor level
Parameters
None
Description
Use the debugging tcp md5 command to enable MD5 authentication debugging for TCP connections.
Use the undo debugging tcp md5 command to disable MD5 authentication debugging for TCP connections.
By default, MD5 authentication debugging is disabled for TCP connections.
Examples
# Enable MD5 authentication debugging for TCP connections.
<Sysname> terminal debugging
<Sysname> debugging tcp md5
1.1.9 debugging tcp packet
Syntax
debugging tcp packet [ task-id socket-id slot-number ]
undo debugging tcp packet [ task-id socket-id slot-number ]
View
User view
Default Level
1: Monitor level
Parameters
task-id: Task ID.
socket-id: Socket ID.
slot-number: Slot number.
Description
Use the debugging tcp packet command to enable TCP packet debugging.
Use the undo debugging tcp packet command to disable TCP packet debugging.
By default, TCP packet debugging is disabled.
Table 1-4 Description on fields of the debugging tcp packet command
|
Field |
Description |
|
task |
Task ID |
|
socketid |
Socket ID |
|
state |
Current TCP connection state |
|
src |
Source IP address |
|
dst |
Destination IP address |
|
seq |
Sequence number |
|
ack |
Acknowledgement sequence number |
|
optlen |
Length of packet data |
|
flag |
Flag bit |
|
window |
Buffer size |
Examples
# Enable telnet server.
<Sysname> system-view
[Sysname] telnet server enable
# Create a VTY user.
[Sysname] user-interface vty 0 4
[Sysname-ui-vty0-4] authentication-mode none
[Sysname-ui-vty0-4] user privilege level 3
# Enable TCP packet debugging.
<Sysname> terminal debugging
<Sysname> debugging tcp packet
# Telnet to the local device from another device. The debugging information on the local device is displayed as follows.
*Dec 30 11:20:23:347 2006 Sysname SOCKET/7/TCP PACKET:
1141233312: Input: task = VTYD(38), socketid = 1, state = Listening,
src = 10.1.1.2:1026, dst = 10.1.1.1:23,
seq = 948064152, ack = 0, optlen = 4, flag = SYN,
window = 8192
// A TCP packet is received. The current TCP connection state is Listening.
*Dec 30 11:20:23:630 2006 Sysname SOCKET/7/TCP PACKET:
1141233312: Output: task = VTYD(38), socketid = 0, state = Syn_Rcvd,
src = 10.1.1.1:23, dst = 10.1.1.2:1026,
seq = 994298079, ack = 948064153, optlen = 4, flag = ACK SYN,
window = 8192
// A TCP packet is sent. The current TCP connection state is Syn_Rcvd.
1.1.10 debugging udp packet
Syntax
debugging udp packet [ task-id socket-id slot-number ]
undo debugging udp packet [ task-id socket-id slot-number ]
View
User view
Default Level
1: Monitor level
Parameters
task-id: Task ID.
socket-id: Socket ID.
slot-number: Slot number.
Description
Use the debugging udp packet command to enable UDP packet debugging.
Use the undo debugging udp packet command to disable UDP packet debugging.
By default, UDP packet debugging is disabled.
Table 1-5 Description on fields of the debugging udp packet command
|
Field |
Description |
|
task |
Task ID |
|
socketid |
Socket ID |
|
src |
Source IP address and source UDP port number |
|
dst |
Destination IP address and destination UDP port number |
|
datalen |
Data length of the UDP packet |
Examples
# Enable UDP packet debugging and execute a tftp operation.
<Sysname> terminal debugging
<Sysname> debugging udp packet
<Sysname> tftp 192.168.0.66 get 1.txt
*Aug 3 06:05:25:800 2006 Sysname SOCKET/7/UDP:
1141236065: Output: task = co0(1), socketid = 1,
src = 192.168.0.62:1025, dst = 192.168.0.66:69, datalen = 14
1.1.11 display fib
Syntax
display fib [ | { begin | include | exclude } text | acl acl-number | ip-prefix ip-prefix-name ]
View
Any view
Default Level
1: Monitor level
Parameters
|: Uses a regular expression to match FIB entries. For detailed information about regular expression, refer to CLI display in Basic System Configuration in the System Volume.
l The begin keyword specifies to display from the first FIB entry that contains the specified string text.
l The include keyword specifies to display only the FIB entries that include the specified string text.
l The exclude keyword specifies to display only the FIB entries that do not include the specified string text.
l The text argument is a string.
acl acl-number: Displays FIB information matching a specified ACL numbered from 2000 to 2999.
ip-prefix ip-prefix-name: Displays FIB information matching a specified IP prefix list, a string of 1 to 19 characters.
Description
Use the display fib command to display FIB forwarding information. If no parameters are specified, all FIB information will be displayed.
Examples
# Display all FIB information.
<Sysname> display fib
FIB Table:
Total number of Routes : 2
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface Token
127.0.0.0/8 127.0.0.1 U t[1141138116] InLoop0 invalid
127.0.0.1/32 127.0.0.1 HU t[1141138116] InLoop0 invalid
Table 1-6 Description on fields of the display fib command
|
Field |
Description |
|
Total number of Routes |
Total number of routes in the FIB table |
|
Destination/Mask |
Destination address/length of mask |
|
Nexthop |
Address of next hop |
|
Flag |
Flags of routes: l “U”—Usable route l “G”—Gateway route l “H”—Host route l “B”—Blackhole route l “D”—Dynamic route l “S”—Static route l “R”—Refused route l “L”—Route generated by ARP or ESIS |
|
TimeStamp |
Time stamp |
|
Interface |
Forwarding interface |
|
Token |
LSP index number |
# Display FIB information matching ACL 2000
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule permit source 10.2.0.0 0.0.255.255
[Sysname-acl-basic-2000] display fib acl 2000
Route entry matched by access-list 2000:
Summary counts: 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface Token
10.2.1.1/32 127.0.0.1 HU t[1150900568] InLoop0 invalid
# Display all entries starting from the one that contains the string 127.
<Sysname> display fib | begin 127
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface Token
10.2.1.1/32 127.0.0.1 HU t[1150900568] InLoop0 invalid
127.0.0.0/8 127.0.0.1 U t[1150623094] InLoop0 invalid
127.0.0.1/32 127.0.0.1 HU t[1150623094] InLoop0 invalid
For description about the above output, refer to Table 1-6.
1.1.12 display fib ip-address
Syntax
display fib ip-address1 [ { mask1 | mask-length1 } [ ip-address2 { mask2 | mask-length2 } | longer ] | longer ]
View
Any view
Default Level
1: Monitor level
Parameters
ip-address1, ip-address2: Destination IP address, in dotted decimal notation. ip-address1 and ip-address2 together determine an address range for the FIB entries to be displayed.
mask1, mask2: IP address mask.
mask-length1, mask-length2: Length of IP address mask.
longer: Displays FIB entries that match the specified address/mask and have masks longer than or equal to the mask that a user enters. If no masks are specified, FIB entries that match the natural network address and have the masks longer than or equal to the natural mask will be displayed.
Description
Use the display fib ip-address command to display FIB entries that match the specified destination IP address.
Examples
# Display the FIB entries that match the natural network of 10.1.0.0 and have the masks longer than or equal to the natural mask.
<Sysname> display fib 10.1.0.0 longer
Route Entry Count: 1
Flag:
U:Useable G:Gateway H:Host B:Blackhole D:Dynamic S:Static
R:Reject L:Generated by ARP or ESIS
Destination/Mask Nexthop Flag TimeStamp Interface Token
10.1.1.1/32 127.0.0.1 HU t[1141140133] InLoop0 invalid
For description about the above output, refer to Table 1-6.
1.1.13 display fib statistics
Syntax
display fib statistics
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display fib statistics command to display statistics about the FIB entries.
Examples
# Display statistics about the FIB entries.
<Sysname> display fib statistics
Route Entry Count : 2
Table 1-7 Description on fields of the display fib statistics command
|
Field |
Description |
|
Route Entry Count |
Number of FIB entries |
1.1.14 display icmp statistics
Syntax
display icmp statistics [ slot slot-number ]
View
Any view
Default Level
1: Monitor level
Parameters
slot slot-number: Displays the ICMP statistics on a specified slot.
Description
Use the display icmp statistics command to display ICMP statistics.
Related commands: display ip interface (in IP Addressing Commands of IP Services Volume) and reset ip statistics.
Examples
# Display ICMP statistics.
<Sysname> display icmp statistics
Input: bad formats 0 bad checksum 0
echo 5 destination unreachable 0
source quench 0 redirects 0
echo reply 10 parameter problem 0
timestamp 0 information request 0
mask requests 0 mask replies 0
time exceeded 0
Output:echo 10 destination unreachable 0
source quench 0 redirects 0
echo reply 5 parameter problem 0
timestamp 0 information reply 0
mask requests 0 mask replies 0
time exceeded 0
Table 1-8 Description on fields of the display icmp statistics command
|
Field |
Description |
|
bad formats |
Number of input wrong format packets |
|
bad checksum |
Number of input wrong checksum packets |
|
echo |
Number of input/output echo packets |
|
destination unreachable |
Number of input/output destination unreachable packets |
|
source quench |
Number of input/output source quench packets |
|
redirects |
Number of input/output redirection packets |
|
echo reply |
Number of input/output replies |
|
parameter problem |
Number of input/output parameter problem packets |
|
timestamp |
Number of input/output time stamp packets |
|
information request |
Number of input information request packets |
|
mask requests |
Number of input/output mask requests |
|
mask replies |
Number of input/output mask replies |
|
information reply |
Number of output information reply packets |
|
time exceeded |
Number of input/output expiration packets |
1.1.15 display ip socket
Syntax
display ip socket [ socktype sock-type ] [ task-id socket-id ] [ slot slot-number ]
View
Any view
Default Level
1: Monitor level
Parameters
socktype sock-type: Displays the socket information of the sock type. The sock type is in the range 1 to 3, corresponding to TCP, UDP and raw IP respectively.
task-id: Displays the socket information of this task. The task ID is in the range 1 to 100.
socket-id: Displays the information of the socket. The socket ID is in the range 0 to 3072.
slot-number: Displays the socket information of the slot.
Description
Use the display ip socket command to display socket information.
Examples
# Display all socket information.
<Sysname> display ip socket
SOCK_STREAM:
Task = LDP(89), socketid = 2, Proto = 6,
LA = 0.0.0.0:646, FA = 0.0.0.0:0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = SO_ACCEPTCONN SO_REUSEADDR SO_REUSEPORT SO_SENDVPNID(0),
socket state = SS_PRIV SS_ASYNC
SOCK_DGRAM:
Task = DHCP(59), socketid = 2, Proto = 17,
LA = 0.0.0.0:67, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_BROADCAST SO_REUSEPORT SO_UDPCHECKSUM,
socket state = SS_PRIV SS_ASYNC
Task = LDP(89), socketid = 1, Proto = 17,
LA = 0.0.0.0:646, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_REUSEADDR SO_UDPCHECKSUM SO_SENDVPNID(0),
socket state = SS_PRIV SS_ASYNC
Task = RDSO(74), socketid = 1, Proto = 17,
LA = 0.0.0.0:1024, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = LSSO(72), socketid = 1, Proto = 17,
LA = 0.0.0.0:1645, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
Task = LSSO(72), socketid = 2, Proto = 17,
LA = 0.0.0.0:1646, FA = 0.0.0.0:0,
sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0,
socket option = SO_UDPCHECKSUM,
socket state = SS_PRIV
SOCK_RAW:
Task = DHCP(59), socketid = 1, Proto = 1,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0,
socket option = 0,
socket state = SS_PRIV SS_ASYNC
Task = ROUT(83), socketid = 2, Proto = 65,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 32767, rcvbuf = 256000, sb_cc = 0, rb_cc = 0,
socket option = 0,
socket state = SS_PRIV SS_NBIO SS_ASYNC
Task = ROUT(83), socketid = 1, Proto = 2,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 32767, rcvbuf = 256000, sb_cc = 0, rb_cc = 0,
socket option = SO_SENDVPNID(0),
socket state = SS_PRIV SS_NBIO SS_ASYNC
Task = RSVP(88), socketid = 1, Proto = 46,
LA = 0.0.0.0, FA = 0.0.0.0,
sndbuf = 4194304, rcvbuf = 4194304, sb_cc = 0, rb_cc = 0,
socket option = 0,
socket state = SS_PRIV SS_NBIO SS_ASYNC
Table 1-9 Description on fields of the display ip socket command
|
Field |
Description |
|
SOCK_STREAM |
TCP socket |
|
SOCK_DGRAM |
UDP socket |
|
SOCK_RAW |
raw IP socket |
|
Task |
Task number |
|
socketid |
Socket ID |
|
Proto |
Protocol number of the socket |
|
LA |
Local address and local port number |
|
FA |
Remote address and remote port number |
|
sndbuf |
sending buffer size of the socket |
|
rcvbuf |
receiving buffer size of the socket |
|
sb_cc |
Current data size in the sending buffer (It is available only for TCP that can buffer data) |
|
rb_cc |
Data size currently in the receiving buffer |
|
socket option |
Socket option |
|
socket state |
Socket state |
1.1.16 display ip statistics
Syntax
display ip statistics [ slot slot-number ]
View
Any view
Default Level
1: Monitor level
Parameters
slot slot-number: Displays the statistics of IP packets on the specified slot.
Description
Use the display ip statistics command to display statistics of IP packets.
Related commands: display ip interface (in IP Addressing Commands of IP Services Volume) and reset ip statistics.
Examples
# Display statistics of IP packets.
<Sysname> display ip statistics
Input: sum 0 local 0
bad protocol 0 bad format 0
bad checksum 0 bad options 0
Output: forwarding 0 local 1
dropped 0 no route 1
compress fails 0
Fragment:input 0 output 0
dropped 0
fragmented 0 couldn't fragment 0
Reassembling:sum 0 timeouts 0
Table 1-10 Description on fields of the display ip statistics command
|
Field |
Description |
|
|
Input: |
sum |
Total number of packets received |
|
local |
Total number of packets with destination being local |
|
|
bad protocol |
Total number of unknown protocol packets |
|
|
bad format |
Total number of packets with incorrect format |
|
|
bad checksum |
Total number of packets with incorrect checksum |
|
|
bad options |
Total number of packets with incorrect option |
|
|
Output: |
forwarding |
Total number of packets forwarded |
|
local |
Total number of packets sent from the local |
|
|
dropped |
Total number of packets discarded |
|
|
no route |
Total number of packets for which no route is available |
|
|
compress fails |
Total number of packets failed to compress |
|
|
Fragment: |
input |
Total number of fragments received |
|
output |
Total number of fragments sent |
|
|
dropped |
Total number of fragments dropped |
|
|
fragmented |
Total number of packets successfully fragmented |
|
|
couldn't fragment |
Total number of packets that can’t be fragmented |
|
|
Reassembling |
sum |
Total number of packets reassembled |
|
timeouts |
Total number of reassembly timeout fragments |
|
1.1.17 display tcp statistics
Syntax
display tcp statistics
View
Default Level
1: Monitor level
Parameters
None
Description
Use the display tcp statistics command to display statistics of TCP traffic.
Related commands: display tcp status and reset tcp statistics.
Examples
# Display statistics of TCP traffic.
<Sysname> display tcp statistics
Received packets:
Total: 8457
packets in sequence: 3660 (5272 bytes)
window probe packets: 0, window update packets: 0
checksum error: 0, offset error: 0, short error: 0
duplicate packets: 1 (8 bytes), partially duplicate packets: 0 (0 bytes)
out-of-order packets: 17 (0 bytes)
packets of data after window: 0 (0 bytes)
packets received after close: 0
ACK packets: 4625 (141989 bytes)
duplicate ACK packets: 1702, too much ACK packets: 0
Sent packets:
Total: 6726
urgent packets: 0
control packets: 21 (including 0 RST)
window probe packets: 0, window update packets: 0
data packets: 6484 (141984 bytes) data packets retransmitted: 0 (0 bytes)
ACK-only packets: 221 (177 delayed)
Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0
Keepalive timeout: 1682, keepalive probe: 1682, Keepalive timeout, so connection
s disconnected : 0
Initiated connections: 0, accepted connections: 22, established connections: 22
Closed connections: 49 (dropped: 0, initiated dropped: 0)
Packets dropped with MD5 authentication: 0
Packets permitted with MD5 authentication: 0
Table 1-11 Description on fields of the display tcp statistics command
|
Field |
Description |
|
|
Received packets: |
Total |
Total number of packets received |
|
packets in sequence |
Number of packets arriving in sequence |
|
|
window probe packets |
Number of window probe packets received |
|
|
window update packets |
Number of window update packets received |
|
|
checksum error |
Number of checksum error packets received |
|
|
offset error |
Number of offset error packets received |
|
|
short error |
Number of received packets with length being too small |
|
|
duplicate packets |
Number of completely duplicate packets received |
|
|
partially duplicate packets |
Number of partially duplicate packets received |
|
|
out-of-order packets |
Number of out-of-order packets received |
|
|
packets of data after window |
Number of packets outside the receiving window |
|
|
packets received after close |
Number of packets that arrived after connection is closed |
|
|
ACK packets |
Number of ACK packets received |
|
|
duplicate ACK packets |
Number of duplicate ACK packets received |
|
|
too much ACK packets |
Number of ACK packets for data unsent |
|
|
Sent packets: |
Total |
Total number of packets sent |
|
urgent packets |
Number of urgent packets sent |
|
|
control packets |
Number of control packets sent |
|
|
window probe packets |
Number of window probe packets sent; in the brackets are resent packets |
|
|
window update packets |
Number of window update packets sent |
|
|
data packets |
Number of data packets sent |
|
|
data packets retransmitted |
Number of data packets retransmitted |
|
|
ACK-only packets |
Number of ACK packets sent; in brackets are delayed ACK packets |
|
|
Retransmitted timeout |
Number of retransmission timer timeouts |
|
|
connections dropped in retransmitted timeout |
Number of connections broken due to retransmission timeouts |
|
|
Keepalive timeout |
Number of keepalive timer timeouts |
|
|
keepalive probe |
Number of keepalive probe packets sent |
|
|
Keepalive timeout, so connections disconnected |
Number of connections broken due to timeout of the keepalive timer |
|
|
Initiated connections |
Number of connections initiated |
|
|
accepted connections |
Number of connections accepted |
|
|
established connections |
Number of connections established |
|
|
Closed connections |
Number of connections closed; in brackets are connections closed accidentally (before receiving SYN from the peer) and connections closed initiatively (after receiving SYN from the peer) |
|
|
Packets dropped with MD5 authentication |
Number of packets dropped with MD5 authentication |
|
|
Packets permitted with MD5 authentication |
Number of packets permitted with MD5 authentication |
|
1.1.18 display tcp status
Syntax
display tcp status
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display tcp status command to display status of all TCP connection for monitoring TCP connections.
Examples
# Display status of all TCP connections
<Sysname> display tcp status
*: TCP MD5 Connection
TCPCB Local Add:port Foreign Add:port State
0690bac4 0.0.0.0:646 0.0.0.0:0 Listening
Table 1-12 Description on fields of the display tcp status command
|
Field |
Description |
|
* |
If the status information of a TCP connection contains *, the TCP adopts the MD5 algorithm for authentication. |
|
TCPCB |
TCP control block |
|
Local Add:port |
Local IP address and port number |
|
Foreign Add:port |
Remote IP address and port number |
|
State |
State of the TCP connection |
1.1.19 display udp statistics
Syntax
display udp statistics
View
Any view
Default Level
1: Monitor level
Parameters
None
Description
Use the display udp statistics command to display statistics of UDP packets.
Related commands: reset udp statistics.
Examples
# Display statistics of UDP packets.
<Sysname> display udp statistics
Received packets:
Total: 0
checksum error: 0
shorter than header: 0, data length larger than packet: 0
unicast(no socket on port): 0
broadcast/multicast(no socket on port): 0
not delivered, input socket full: 0
input packets missing pcb cache: 0
Sent packets:
Total: 1
Table 1-13 Description on fields of the display udp statistics command
|
Field |
Description |
|
|
Received packets: |
Total |
Total number of UDP packets received |
|
checksum error |
Total number of packets with incorrect checksum |
|
|
shorter than header |
Number of packets with data shorter than head |
|
|
data length larger than packet |
Number of packets with data longer than packet |
|
|
unicast(no socket on port) |
Number of unicast packets with no socket on port |
|
|
broadcast/multicast(no socket on port) |
Number of broadcast/multicast packets without socket on port |
|
|
not delivered, input socket full |
Number of packets not delivered to upper layer due to socket buffer being full |
|
|
input packets missing pcb cache |
Number of packets without matching PCB cache |
|
|
Sent packets: |
Total |
Total number of UDP packets sent |
1.1.20 ip forward-broadcast (interface view)
Syntax
ip forward-broadcast [ acl acl-number ]
undo ip forward-broadcast
View
VLAN interface view, POS interface view, tunnel interface view
Default Level
2: System level
Parameters
acl acl-number: Number of an ACL from 2000 to 3999. From 2000 to 2999 are numbers for basic ACLs, and from 3000 to 3999 are numbers for advanced ACLs. Only directed broadcasts permitted by the ACL can be forwarded.
Description
Use the ip forward-broadcast command to enable the interface to forward directed broadcasts.
Use the undo ip forward-broadcast command to disable an interface from forwarding directed broadcasts.
By default, an interface is disabled from forwarding directed broadcasts.
Examples
# Allow VLAN-interface 2 to forward directed broadcasts permitted by ACL 2001.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] ip forward-broadcast acl 2001
1.1.21 ip forward-broadcast (system view)
Syntax
ip forward-broadcast
undo ip forward-broadcast
View
System view
Default Level
2: System level
Parameters
None
Description
Use the ip forward-broadcast command to enable the device to forward directed broadcasts.
Use the undo ip forward-broadcast command to disable the device from forwarding directed broadcasts.
By default, the device is disabled from forwarding directed broadcasts in system view.
Examples
# Enable the device to forward directed broadcasts in system view.
<Sysname> system-view
[Sysname] ip forward-broadcast
1.1.22 ip redirects enable
Syntax
ip redirects enable
undo ip redirects
View
System view
Default Level
2: System level
Parameters
None
Description
Use the ip redirects enable command to enable sending ICMP redirection packets.
Use the undo ip redirects command to disable sending ICMP redirection packets.
This feature is enabled by default.
Examples
# Disable sending ICMP redirection packets.
<Sysname> system-view
[Sysname] undo ip redirects
1.1.23 ip ttl-expires enable
Syntax
ip ttl-expires enable
undo ip ttl-expires
View
System view
Default Level
2: System level
Parameters
None
Description
Use the ip ttl-expires enable command to enable the sending of ICMP timeout packets.
Use the undo ip ttl-expires command to disable sending ICMP timeout packets.
Sending ICMP timeout packets is enabled by default.
If the feature is disabled, the device will not send TTL timeout ICMP packets, but still send “reassembly timeout” ICMP packets.
Examples
# Disable sending ICMP timeout packets.
<Sysname> system-view
[Sysname] undo ip ttl-expires
1.1.24 ip unreachables enable
Syntax
ip unreachables enable
undo ip unreachables
View
System view
Default Level
2: System level
Parameters
None
Description
Use the ip unreachables enable command to enable the sending of ICMP destination unreachable packets.
Use the undo ip unreachables command to disable sending ICMP destination unreachable packets.
Sending ICMP destination unreachable packets is enabled by default.
If the feature is disabled, the device will not send network unreachable and source route failure ICMP packets, but still send other destination unreachable ICMP packets.
Examples
# Disable sending ICMP destination unreachable packets.
<Sysname> system-view
[Sysname] undo ip unreachables
1.1.25 reset ip statistics
Syntax
reset ip statistics [ slot slot-number ]
View
User view
Default Level
2: System level
Parameters
slot slot-number: Clears IP packet statistics on the specified slot.
Description
Use the reset ip statistics command to clear statistics of IP packets.
Related commands: display ip interface (in IP Addressing Commands of IP Services Volume) and display ip statistics.
Examples
# Clear statistics of IP packets.
<Sysname> reset ip statistics
1.1.26 reset tcp statistics
Syntax
reset tcp statistics
View
User view
Default Level
2: System level
Parameters
None
Description
Use the reset tcp statistics command to clear statistics of TCP traffic.
Related commands: display tcp statistics.
Examples
# Display statistics of TCP traffic.
<Sysname> reset tcp statistics
1.1.27 reset udp statistics
Syntax
reset udp statistics
View
User view
Default Level
2: System level
Parameters
None
Description
Use the reset udp statistics command to clear statistics of UDP traffic.
Examples
# Display statistics of UDP traffic.
<Sysname> reset udp statistics
1.1.28 tcp mss
Syntax
tcp mss value
undo tcp mss
View
POS interface view, tunnel interface view
Default Level
2: System level
Parameters
value: TCP maximum segment size (MSS) in bytes.
Description
Use the tcp mss command to configure the TCP MSS.
Use the undo tcp mss command to restore the default.
As the default MTU on an interface is 1500 bytes, and there are link layer cost and IP packet header, so the recommended TCP MSS is about 1,200 bytes.
By default, the TCP MSS is 1,460 bytes.
Examples
# Set the TCP MSS to 1300 bytes on interface POS4/1/4.
<Sysname> system-view
[Sysname] interface pos 4/1/4
[Sysname-Pos4/1/4] tcp mss 1300
1.1.29 tcp timer fin-timeout
Syntax
tcp timer fin-timeout time-value
undo tcp timer fin-timeout
View
System view
Default Level
2: System level
Parameters
time-value: Length of the TCP finwait timer in seconds.
Description
Use the tcp timer fin-timeout command to configure the length of the TCP finwait timer.
Use the undo tcp timer fin-timeout command to restore the default.
By default, the length of the TCP finwait timer is 675 seconds.
Note that the actual length of the finwait timer is determined by the following formula:
Actual length of the finwait timer = (Configured length of the finwait timer – 75) + configured length of the synwait timer
Related commands: tcp timer syn-timeout and tcp window.
Examples
# Set the length of the TCP finwait timer to 800 seconds.
<Sysname> system-view
[Sysname] tcp timer fin-timeout 800
1.1.30 tcp timer syn-timeout
Syntax
tcp timer syn-timeout time-value
undo tcp timer syn-timeout
View
System view
Default Level
2: System level
Parameters
time-value: Length of the TCP finwait timer in seconds.
Description
Use the tcp timer syn-timeout command to configure the length of the TCP synwait timer.
Use the undo tcp timer syn-timeout command to restore the default.
By default, the length of the TCP synwait timer is 75 seconds.
Related commands: tcp timer fin-timeout and tcp window.
Examples
# Set the length of the TCP synwait timer to 80 seconds.
<Sysname> system-view
[Sysname] tcp timer syn-timeout 80
1.1.31 tcp window
Syntax
tcp window window-size
undo tcp window
View
System view
Default Level
2: System level
Parameters
window-size: Receiving/sending buffer size of TCP connection in KB.
Description
Use the tcp window command to configure the receiving/sending buffer size of TCP connection.
Use the undo tcp window command to restore the default.
The TCP receiving/sending buffer is 8 KB by default.
Related commands: tcp timer fin-timeout and tcp timer syn-timeout.
Examples
# Configure the receiving/sending buffer of TCP connection as 3 KB.
<Sysname> system-view
[Sysname] tcp window 3
