[index]
CentreCOM AR450S コマンドリファレンス 2.9
SHOW IPSEC COUNTERS
カテゴリー：IPsec / 一般コマンド
SHOW IPSEC COUNTERS[={AH|ALG|ESP|MAIN|SAD|SETUP|SPD}]
IPsecモジュールのデバッグ用統計カウンターを表示する。
COUNTERS: 表示する統計カウンターのカテゴリーを指定する。省略時およびALLを指定した場合はすべてのカウンターが表示される。その他カテゴリーには、AH（AHプロトコル処理部）、ALG（暗号化・認証アルゴリズム処理部）、ESP（ESPプロトコル処理部）、MAIN（IPsecメインプロトコル処理部）、SAD（SAデータベース）、SETUP（SAの構築と削除）、SPD（セキュリティーポリシーデータベース）がある。カテゴリーはカンマ区切りで複数指定可能。
SecOff > show ipsec counters
SAD Counters
Good Failed
Find SA 1 0
Get SA 2088 2
Add SA 2
Delete SA 0 0
SPD Counters
Good Failed
policyMatchSelectors 822 1624
policyAdd 3 0
policyGet 4 3
policyDelete 0 0
policyGetConfig 2 0
policySetConfig 1 0
policyFindByPeer 0 0
saSpecAdd 2 0
saSpecGet 6 2
saSpecDelete 0 0
bundleSpecAdd 1 0
bundleSpecGet 4 1
bundleSpecDelete 0 0
Policy Filter Counters
localAddressMaskFailed 811 localAddressRangeFailed 0
remoteAddressMaskFailed 0 remoteAddressRangeFailed 0
localPortFailed 813 remotePortFailed 0
localNameFailed 0 remoteNameFailed 0
transportProtoFailed 0
icmpTypeFailed 0
neighbourDiscFailed 0
IPsec bundle setup/remove counters:
setupGetSaSpecFail 0 setupGetPolicyFail 0
setupStarted 1 setupSaSetupFailImm 0
setupSaSetupStarted 2 setupSaSetupFailed 0
setupDone 1 setupFailed 0
setupBundleRemoving 0
removeStarted 0 removeSaSetupStarted 0
removeDone 0
IPsec main packet processing counters:
outProcessPkt 1437 inProcessPkt 1466
outNoPolicyFound 0 inNoPolicyFound 0
outProcessPktFinished 1029 inProcessPktFinished 1054
IPsec over UDP Counters
outPkt 0 inPkt 0
outPktFail 0 inPktBadVersion 0
inPktNoPolicy 0
outUdpHeartBeat 0 inUdpHeartBeat 0
ESP setup/remove counters
setupGetSaFailed 0 setupEncSetupFailed 0
setupHashSetupFailImm 0 setupEncSetupBundleRm 0
setupFailed 0 setupDone 1
removeGetSaFailed 0 removeNothingDone 0
removeHashFailImm 0 removeDone 0
ESP outbound processing counters
bufChainCopy 0 seqNumberCycled 0
encryptionStart 1029 encryptionFailImm 0
encDoneGetSaFail 0 encryptionFail 0
encDoneSaBadState 0 encryptionGood 1029
hashStart 1029 hashFailImm 0
hashDoneGetSaFail 0 hashFail 0
hashDoneSaBadState 0 hashGood 1029
ESP inbound processing counters
bufChainCopy 0 icvInvalid 0
paddingInvalid 0 replayedPacket 0
hashStart 1054 hashFailImm 0
hashDoneGetSaFail 0 hashFail 0
hashDoneSaBadState 0 hashGood 1054
decryptionStart 1054 decryptionFailImm 0
encDoneGetSaFail 0 decryptionFail 0
encDoneSaBadState 0 decryptionGood 1054
AH setup/remove counters
setupGetSaFailed 0 setupFailed 0
setupDone 1
removeGetSaFailed 0 removeNothingDone 0
removeDone 0
AH outbound processing counters
bufChainCopy 0
seqNumberCycled 0 fragmentSeen 0
hashStart 1029 hashFailImm 0
hashDoneGetSaFail 0 hashFail 0
hashDoneSaBadState 0 hashGood 1029
AH inbound processing counters
bufChainCopy 0 replayedPacket 0
icvInvalid 0 badPayloadLength 0
hashStart 1054 hashFailImm 0
hashDoneGetSaFail 0 hashFail 0
hashDoneSaBadState 0 hashGood 1054
COMP setup/remove counters:
setupGetSaFailed 0 setupFailed 0
setupDone 0
removeGetSaFailed 0 removeNothingDone 0
removeDone 0
COMP outbound processing counters:
bufChainCopy 0
compTooSmall 0 compFragment 0
nonExpansionBackoff 0 dataExpansion 0
compressionStart 0 compressionFailImm 0
compDoneGetSaFail 0 compressionFail 0
compDoneSaBadState 0 compressionGood 0
COMP inbound processing counters:
bufChainCopy 0
decompressionStart 0 decompressionFailImm 0
decompDoneGetSaFail 0 decompressionFail 0
decompDoneSaBadState 0 decompressionGood 0
General Algorithm Counters
nullKeymatProcessed 0
DES:
desKeymatProcessed 1
desAttachFail 0 desAttachGood 1
desConfigureFail 0 desConfigureGood 1
desRemove 0 desDetached 0
desEncodeGood 2058 desDecodeGood 2108
desEncodeFail 0 desDecodeFail 0
desEncodeDiscard 0 desDecodeDiscard 0
desEncodeGetInfoFail 0
TRIPLE DES INNER:
3DesInnerKeymatProcessed 0
3DesInnerAttachFail 0 3DesInnerAttachGood 0
3DesInnerConfigureFail 0 3DesInnerConfigureGood 0
3DesInnerRemove 0 3DesInnerDetached 0
3DesInnerEncodeGood 0 3DesInnerDecodeGood 0
3DesInnerEncodeFail 0 3DesInnerDecodeFail 0
3DesInnerEncodeDiscard 0 3DesInnerDecodeDiscard 0
3DesInnerEncGetInfoFail 0
TRIPLE DES OUTER:
3DesOuterKeymatProcessed 0
3DesOuterAttachFail 0 3DesOuterAttachGood 0
3DesOuterConfigureFail 0 3DesOuterConfigureGood 0
3DesOuterRemove 0 3DesOuterDetached 0
3DesOuterEncodeGood 0 3DesOuterDecodeGood 0
3DesOuterEncodeFail 0 3DesOuterDecodeFail 0
3DesOuterEncodeDiscard 0 3DesOuterDecodeDiscard 0
3DesOuterEncGetInfoFail 0
TRIPLE DES 2KEY:
3Des2KeyKeymatProcessed 0
3Des2KeyAttachFail 0 3Des2KeyAttachGood 0
3Des2KeyConfigureFail 0 3Des2KeyConfigureGood 0
3Des2KeyRemove 0 3Des2KeyDetached 0
3Des2KeyEncodeGood 0 3Des2KeyDecodeGood 0
3Des2KeyEncodeFail 0 3Des2KeyDecodeFail 0
3Des2KeyEncodeDiscard 0 3Des2KeyDecodeDiscard 0
3Des2KeyEncGetInfoFail 0
AES:
aesKeymatProcessed 0
aesAttachFail 0 aesAttachGood 0
aesConfigureFail 0 aesConfigureGood 0
aesRemove 0 aesDetached 0
aesEncodeGood 0 aesDecodeGood 0
aesEncodeFail 0 aesDecodeFail 0
aesEncodeDiscard 0 aesDecodeDiscard 0
aesEncodeGetInfoFail 0
SHA:
shaKeymatProcessed 1
shaAttachFail 0 shaAttachGood 1
shaConfigureFail 0 shaConfigureGood 1
shaRemove 0 shaDetached 0
shaEncodeGood 2058 shaDecodeGood 2108
shaEncodeFail 0 shaDecodeFail 0
shaEncodeDiscard 0 shaDecodeDiscard 0
MD5:
md5KeymatProcessed 1
md5AttachFail 0 md5AttachGood 1
md5ConfigureFail 0 md5ConfigureGood 1
md5Remove 0 md5Detached 0
md5EncodeGood 2058 md5DecodeGood 2108
md5EncodeFail 0 md5DecodeFail 0
md5EncodeDiscard 0 md5DecodeDiscard 0
DES-MAC:
desmacKeymatProcessed 0
desmacAttachFail 0 desmacAttachGood 0
desmacConfigureFail 0 desmacConfigureGood 0
desmacRemove 0 desmacDetached 0
desmacEncodeGood 0 desmacDecodeGood 0
desmacEncodeFail 0 desmacDecodeFail 0
desmacEncodeDiscard 0 desmacDecodeDiscard 0
LZS:
lzsKeymatProcessed 0
lzsAttachFail 0 lzsAttachGood 0
lzsConfigureFail 0 lzsConfigureGood 0
lzsRemove 0 lzsDetached 0
lzsEncodeGood 0 lzsDecodeGood 0
lzsEncodeFail 0 lzsDecodeFail 0
lzsEncodeDiscard 0 lzsDecodeDiscard 0
|
SHOW IPSEC SA
RFC2401, Security Architecture for the Internet Protocol
RFC2402, IP Authentication Header
RFC2403, The Use of HMAC-MD5-96 within ESP and AH
RFC2404, The Use of HMAC-SHA-1-96 within ESP and AH
RFC2405, The ESP DES-CBC Cipher Algorithm With Explicit IV
RFC2406, IP Encapsulating Security Payload (ESP)
RFC2407, The Internet IP Security Domain of Interpretation for ISAKMP
RFC2408, Internet Security Association and Key Management Protocol (ISAKMP)
RFC2409, The Internet Key Exchange (IKE)
RFC2410, The NULL Encryption Algorithm and Its Use With IPsec
RFC2411, IP Security Document Roadmap
RFC2412, The OAKLEY Key Determination Protocol
RFC2451, The ESP CBC-Mode Cipher Algorithms
RFC2104, HMAC: Keyed-Hashing for Message Authentication
(C) 2003 - 2009 アライドテレシスホールディングス株式会社
PN: J613-M3069-03 Rev.L