Packet processing statistics
The show [inspect] CLI command displays packet processing statistics. Values are reported as totals since the last start or restart of the packet processing sensor or since the last reboot of the appliance. When you restart the packet processing sensor or reboot the appliance, the values are reset to zero.
Packet processing values
| Value | Description |
|---|---|
| Active_TCP_Conns | The current number of active TCP connections. |
| HTTP_Errs | The number of HTTP requests or responses that PAM can not properly parse due to violations of the RFC 2616 protocol. Some applications abuse HTTP port 80 to avoid firewall rules. PAM heuristics use the most appropriate type of application protocol to assign the parser. If this number is high compared to a pam.http.request or a pam.http.response, then investigate to determine which application is abusing the HTTP port. An unknown Trojan might also be misusing the port. |
| HTTP_Reqs | The number of HTTP requests parsed. |
| HTTP_Resps | The number of HTTP responses parsed. |
| ICMPV6_Bytes | The number of ICMP version 6 packet bytes detected. |
| ICMPV6_Chksum_Errs | The number of ICMP version 6 packets with checksum errors detected. |
| ICMPV6_Pkts | The number of ICMP version 6 packets detected. |
| ICMP_Bytes | The number of ICMP packet bytes detected. |
| ICMP_Chksum_Errs | The number of ICMP packets with checksum errors detected. |
| ICMP_Pkts | The number of ICMP packets detected. |
| IPv4_Bytes | The number of IP version 4 packet bytes detected. |
| IPv4_Chksum_Errs | The number of IP version 4 packets with checksum errors. |
| IPv4_Frags | The number of IP version 4 fragments detected. |
| IPv4_Pkts | The number of IP version 4 packets detected. |
| IPv6_Bytes | The number of IP version 6 packet bytes detected. |
| IPv6_Frags | The number of IP version 6 fragments detected. |
| IPv6_Pkts | The number of IP version 6 packets detected. |
| TCP_Bytes | The number of TCP packet bytes detected. |
| TCP_Chksum_Errs | The number of bad TCP checksums verified in software. |
| TCP_Conns | The total number of TCP connections processed by PAM. |
| TCP_Pkts | The number of TCP packets detected. |
| Total_Bytes | The total number of bytes received. If the Ethernet frames are received, then an additional 24 byte frame check sequence is added to the captured frame size to ensure throughput calculations are accurate. |
| Total_Pkts | The total number of frames received. |
| UDP_Bytes | The number of UDP packet bytes detected. |
| UDP_Chksum_Errs | The number of TCP packets with checksum errors detected. |
| UDP_Pkts | The number of UDP packets detected. |