3 Comments on “How to check the overall SecureXL statistics:”

1. prosto_marussia says:

   February 26, 2018 at 9:26 am

   Here is output of statistics file:

   [Expert@Firewall]# cat /proc/ppk/statistics
   Name Value Name Value
   ——————– ————— ——————– —————
   conns created 84416 conns deleted 84410
   temporary conns 0 templates 0
   nat conns 6051 accel packets 0
   accel bytes 0 F2F packets 158880562
   ESP enc pkts 0 ESP enc err 0
   ESP dec pkts 0 ESP dec err 0
   ESP other err 0 espudp enc pkts 0
   espudp enc err 0 espudp dec pkts 0
   espudp dec err 0 espudp other err 0
   AH enc pkts 0 AH enc err 0
   AH dec pkts 0 AH dec err 0
   AH other err 0 memory used 0
   free memory 0 acct update interval 30
   current total conns 6 TCP violations 0
   conns from templates 0 TCP conns 5
   delayed TCP conns 0 non TCP conns 1
   delayed nonTCP conns 0 F2F conns 6
   F2F bytes 16066670783 crypt conns 0
   enc bytes 0 dec bytes 0
   partial conns 0 anticipated conns 0
   dropped packets 0 dropped bytes 0
   nat templates 0 port alloc templates 0
   conns from nat templ 0 port alloc conns (tm 0
   port alloc f2f 0 PXL templates 0
   PXL conns 0 PXL packets 0
   PXL bytes 0 PXL async packets 0
   conns auto expired 0 C used templates 0
   pxl tmpl conns 0 C conns from tmpl 0
   C non TCP F2F conns 1 C tcp handshake conn 0
   C tcp established co 5 C tcp closed conns 0
   C tcp f2f handshake 0 C tcp f2f establishe 5
   C tcp f2f closed con 0 C tcp pxl handshake 0
   C tcp pxl establishe 0 C tcp pxl closed con 0

   
   
   
   0

   
   
   
   0
2. prosto_marussia says:

   February 26, 2018 at 9:27 am

   While fwaccel stat shows only summary.

   [Expert@Firewall]# fwaccel stat
   Accelerator Status : on
   Accept Templates : enabled
   Drop Templates : disabled
   NAT Templates : disabled by user

   Accelerator Features : Accounting, NAT, Cryptography, Routing,
   HasClock, Templates, Synchronous, IdleDetection,
   Sequencing, TcpStateDetect, AutoExpire,
   DelayedNotif, TcpStateDetectV2, CPLS, WireMode,
   DropTemplates, NatTemplates, Streaming,
   MultiFW, AntiSpoofing, ViolationStats,
   Nac, AsychronicNotif, ERDOS
   Cryptography Features : Tunnel, UDPEncapsulation, MD5, SHA1, NULL,
   3DES, DES, CAST, CAST-40, AES-128, AES-256,
   ESP, LinkSelection, DynamicVPN, NatTraversal,
   EncRouting, AES-XCBC, SHA256

   
   
   
   0

   
   
   
   0
3. prosto_marussia says:

   February 27, 2018 at 8:30 am

   Instead of cat /proc/ppk/statistics you can also use fwaccel stats -l. Outputs are equal.

   
   
   
   0

   
   
   
   0