Displaying Statistics and Information for IP Filter

Table 5-3 Displaying IP Filter Statistics and Information (Task Map)

How to View State Tables for IP Filter

Before You Begin

You must become an administrator who is assigned the IP Filter Management rights profile. For more information, see How to Use Your Assigned Administrative Rights in Oracle Solaris 11.1 Administration: Security Services.

• View the state table.

  $ ipfstat

  ---

  Note - You can use the -t option to view the state table in the UNIX top utility format.

  ---

Example 5-12 Viewing State Tables for IP Filter

The following example shows state table output.

$ ipfstat
bad packets:            in 0    out 0
 IPv6 packets:          in 56286 out 63298
 input packets:         blocked 160 passed 11 nomatch 1 counted 0 short 0
output packets:         blocked 0 passed 13681 nomatch 6844 counted 0 short 0
 input packets logged:  blocked 0 passed 0
output packets logged:  blocked 0 passed 0
 packets logged:        input 0 output 0
 log failures:          input 0 output 0
fragment state(in):     kept 0  lost 0  not fragmented 0
fragment reassembly(in):bad v6 hdr 0     bad v6 ehdr 0  failed reassembly 0
fragment state(out):    kept 0  lost 0  not fragmented 0
packet state(in):       kept 0  lost 0
packet state(out):      kept 0  lost 0
ICMP replies:   0       TCP RSTs sent:  0
Invalid source(in):     0
Result cache hits(in):  152     (out):  6837
IN Pullups succeeded:   0       failed: 0
OUT Pullups succeeded:  0       failed: 0
Fastroute successes:    0       failures:       0
TCP cksum fails(in):    0       (out):  0
IPF Ticks:      14341469
Packet log flags set: (0)
        none

How to View State Statistics for IP Filter

Before You Begin

You must become an administrator who is assigned the IP Filter Management rights profile. For more information, see How to Use Your Assigned Administrative Rights in Oracle Solaris 11.1 Administration: Security Services.

• View the state statistics.

  $ ipfstat -s

Example 5-13 Viewing State Statistics for IP Filter

The following example shows state statistics output.

$ ipfstat -s
IP states added:
        0 TCP
        0 UDP
        0 ICMP
        0 hits
        0 misses
        0 maximum
        0 no memory
        0 max bucket
        0 active
        0 expired
        0 closed
State logging enabled

State table bucket statistics:
        0 in use        
        0.00% bucket usage
        0 minimal length
        0 maximal length
        0.000 average length

How to View IP Filter Tunable Parameters

Before You Begin

You must become an administrator who is assigned the IP Filter Management rights profile. For more information, see How to Use Your Assigned Administrative Rights in Oracle Solaris 11.1 Administration: Security Services.

• View the kernel tunable parameters for IP Filter.

  The following output is truncated.

  $ ipf -T list
  fr_flags    min 0    max 0xffffffff    current 0
  fr_active    min 0    max 0    current 0
  ...
  ipstate_logging    min 0    max 0x1    current 1
  ...
  fr_authq_ttl    min 0x1    max 0x7fffffff    current sz = 0
  fr_enable_rcache    min 0    max 0x1    current 0

How to View NAT Statistics for IP Filter

Before You Begin

You must become an administrator who is assigned the IP Filter Management rights profile. For more information, see How to Use Your Assigned Administrative Rights in Oracle Solaris 11.1 Administration: Security Services.

• View NAT statistics.

  $ ipnat -s

Example 5-14 Viewing NAT Statistics for IP Filter

The following example shows NAT statistics.

$ ipnat -s
mapped  in      0       out     0
added   0       expired 0
no memory       0       bad nat 0
inuse   0
rules   1
wilds   0

How to View Address Pool Statistics for IP Filter

Before You Begin

You must become an administrator who is assigned the IP Filter Management rights profile. For more information, see How to Use Your Assigned Administrative Rights in Oracle Solaris 11.1 Administration: Security Services.

• View address pool statistics.

  $ ippool -s

Example 5-15 Viewing Address Pool Statistics for IP Filter

The following example shows address pool statistics.

$ ippool -s
Pools:  3
Hash Tables:    0
Nodes:  0