ddos l4-tcp¶
l4 tcp counters
l4-tcp Specification¶
Type Configuration Resource Element Name l4-tcp Element URI /axapi/v3/ddos/l4-tcp Element Attributes l4-tcp_attributes Statistics Data URI /axapi/v3/ddos/l4-tcp/stats Schema l4-tcp schema
Operations Allowed:
Operation | Method | URI | Payload | |
---|---|---|---|---|
Create Object | POST | /axapi/v3/ddos/l4-tcp | ||
Get Object | GET | /axapi/v3/ddos/l4-tcp | ||
Modify Object | POST | /axapi/v3/ddos/l4-tcp | ||
Replace Object | PUT | /axapi/v3/ddos/l4-tcp | ||
Delete Object | DELETE | /axapi/v3/ddos/l4-tcp |
l4-tcp attributes¶
sampling-enable
Type: Listuuid
Description uuid of the object
Type: string
Maximum Length: 64 characters
Maximum Length: 1 characters
sampling-enable¶
Specification Type list Block object keys counters1
Description ‘all’: all; ‘tcp_sess_create’: TCP Sessions Created; ‘intcp’: TCP Total Packets Received; ‘tcp_syn_rcvd’: TCP SYN Received; ‘tcp_invalid_syn_rcvd’: TCP Invalid SYN Received; ‘tcp_syn_ack_rcvd’: TCP SYN ACK Received; ‘tcp_ack_rcvd’: TCP ACK Received; ‘tcp_fin_rcvd’: TCP FIN Received; ‘tcp_rst_rcvd’: TCP RST Received; ‘tcp_outrst’: TCP Outbound RST; ‘tcp_reset_client’: TCP Reset Client; ‘tcp_reset_server’: TCP Reset Server; ‘tcp_syn_rate’: TCP SYN Rate Per Sec; ‘tcp_total_drop’: TCP Total Packets Dropped; ‘tcp_dst_drop’: TCP Dst Packets Dropped; ‘tcp_exceed_drop_any_dst’: TCP Dst Exceed Drop (deprecated); ‘tcp_exceed_drop_prate_dst’: TCP Dst Packet Rate Drop (deprecated); ‘tcp_exceed_drop_crate_dst’: TCP Dst Connection Rate Drop (deprecated); ‘tcp_exceed_drop_climit_dst’: TCP Dst Connection Limit Drop (deprecated); ‘tcp_drop_black_dst’: TCP Dst Blacklist Drop (deprecated); ‘tcp_src_drop’: TCP Src Packets Dropped; ‘tcp_exceed_drop_any_src’: TCP Src Exceed Drop (deprecated); ‘tcp_exceed_drop_prate_src’: TCP Src Packet Rate Drop (deprecated); ‘tcp_exceed_drop_crate_src’: TCP Src Connection Rate Drop (deprecated); ‘tcp_exceed_drop_climit_src’: TCP Src Connection Limit Drop (deprecated); ‘tcp_drop_black_src’: TCP Src Blacklist Drop (deprecated); ‘tcp_drop_black_user_cfg_src’: TCP Src Blacklist User Packets Dropped; ‘tcp_src_dst_drop’: TCP SrcDst Packets Dropped; ‘tcp_exceed_drop_any_src_dst’: TCP SrcDst Exceed Drop (deprecated); ‘tcp_exceed_drop_prate_src_dst’: TCP SrcDst Packet Rate Drop (deprecated); ‘tcp_exceed_drop_crate_src_dst’: TCP SrcDst Connection Rate Drop (deprecated); ‘tcp_exceed_drop_climit_src_dst’: TCP SrcDst Connection Limit Drop (deprecated); ‘tcp_drop_black_src_dst’: TCP SrcDst Blacklist Drop (deprecated); ‘tcp_drop_black_user_cfg_src_dst’: TCP SrcDst Blacklist User Packets Dropped; ‘tcp_port_zero_drop’: TCP Port 0 Packets Dropped; ‘tcp_syncookie_sent’: TCP SYN Cookie Sent; ‘tcp_syncookie_sent_fail’: TCP SYN Cookie Send Failed; ‘tcp_syncookie_check_fail’: TCP SYN Cookie Check Failed; ‘tcp_syncookie_hw_missing’: TCP SYN Cookie HW Missed; ‘tcp_syncookie_fail_bl’: TCP SYN Cookie Blacklist Failed; ‘tcp_syncookie_pass’: TCP SYN Cookie Passed; ‘syn_auth_pass’: TCP SYN Auth Passed; ‘syn_auth_skip’: TCP SYN Auth Skipped; ‘tcp_over_limit_syn_auth_dst’: TCP Dst Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_cookie_dst’: TCP Dst Over Limit Cookie (deprecated); ‘tcp_over_limit_syn_auth_dst_port’: TCP Dst Port Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_cookie_dst_port’: TCP Dst Port Over Limit Cookie (deprecated); ‘tcp_action_on_ack_start’: TCP ACK Retry Init; ‘tcp_action_on_ack_matched’: TCP ACK Retry Matched; ‘tcp_action_on_ack_passed’: TCP ACK Retry Passed; ‘tcp_action_on_ack_failed’: TCP ACK Retry Dropped; ‘tcp_action_on_ack_timeout’: TCP ACK Retry Timeout; ‘tcp_action_on_ack_reset’: TCP ACK Retry Timeout Reset; ‘tcp_ack_no_syn’: TCP ACK No SYN; ‘tcp_out_of_seq’: TCP Out-Of-Seq Total; ‘tcp_zero_window’: TCP Zero-Window Total; ‘tcp_retransmit’: TCP Retransmit Total; ‘tcp_rexmit_syn_limit_drop’: TCP Retransmit SYN Exceed Dropped; ‘tcp_zero_window_bl’: TCP Zero-Window Blacklisted; ‘tcp_out_of_seq_bl’: TCP Out-Of-Seq Blacklisted; ‘tcp_retransmit_bl’: TCP Retransmit Blacklisted; ‘tcp_rexmit_syn_limit_bl’: TCP Retransmit SYN Exceed Blacklisted; ‘tcp_per_conn_prate_exceed’: TCP Conn Pkt Rate Dropped; ‘tcp_action_on_ack_gap_drop’: TCP ACK Retry Retry-Gap Dropped; ‘tcp_action_on_ack_gap_pass’: TCP ACK Retry Retry-Gap Passed; ‘tcp_new_conn_ack_retry_gap_start’: TCP New-Connection-Ack-Retry-Gap Initialize (deprecated); ‘tcp_new_conn_ack_retry_gap_passed’: TCP New-Connection-Ack-Retry-Gap Pass (deprecated); ‘tcp_new_conn_ack_retry_gap_failed’: TCP New-Connection-Ack-Retry-Gap Fail (deprecated); ‘tcp_new_conn_ack_retry_gap_timeout’: TCP New-Connection-Ack-Retry-Gap Timeout (deprecated); ‘tcp_new_conn_ack_retry_gap_reset’: TCP New-Connection-Ack-Retry-Gap Reset (deprecated); ‘tcp_new_conn_ack_retry_gap_drop’: TCP New-Connection-Ack-Retry-Gap Drop (deprecated); ‘tcp_action_on_syn_start’: TCP SYN Retry Init; ‘tcp_action_on_syn_passed’: TCP SYN Retry Passed; ‘tcp_action_on_syn_failed’: TCP SYN Retry Dropped; ‘tcp_action_on_syn_timeout’: TCP SYN Retry Timeout; ‘tcp_action_on_syn_reset’: TCP SYN Retry Timeout Reset; ‘tcp_action_on_syn_gap_drop’: TCP SYN Retry Retry-Gap Dropped; ‘tcp_action_on_syn_gap_pass’: TCP SYN Retry Retry-Gap Passed; ‘tcp_unauth_rst_drop’: TCP Unauth RST Dropped; ‘dst_tcp_filter_match’: Dst Filter Match; ‘dst_tcp_filter_not_match’: Dst Filter No Match; ‘dst_tcp_filter_action_blacklist’: Dst Filter Action Blacklist; ‘dst_tcp_filter_action_drop’: Dst Filter Action Drop; ‘dst_tcp_filter_action_default_pass’: Dst Filter Action Default Pass; ‘tcp_over_limit_syn_auth_src’: TCP Src Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_auth_src_dst’: TCP SrcDst Over Limit Authentication (deprecated); ‘tcp_over_limit_syn_cookie_src’: TCP Src Over Limit Cookie (deprecated); ‘tcp_over_limit_syn_cookie_src_dst’: TCP SrcDst Over Limit Cookie (deprecated); ‘tcp_exceed_drop_brate_dst’: TCP Dst KiBit Rate Drop (KiBit) (deprecated); ‘tcp_exceed_drop_brate_src’: TCP Src KiBit Rate Drop (KiBit) (deprecated); ‘tcp_exceed_drop_brate_src_dst’: TCP SrcDst KiBit Rate Drop (KiBit) (deprecated); ‘tcp_concurrent’: TCP Concurrent Port Access; ‘dst_tcp_filter_action_whitelist’: Dst Filter Action WL; ‘src_tcp_filter_match’: Src Filter Match; ‘src_tcp_filter_not_match’: Src Filter No Match; ‘src_tcp_filter_action_blacklist’: Src Filter Action Blacklist; ‘src_tcp_filter_action_drop’: Src Filter Action Drop; ‘src_tcp_filter_action_default_pass’: Src Filter Action Default Pass; ‘src_tcp_filter_action_whitelist’: Src Filter Action WL; ‘src_dst_tcp_filter_match’: SrcDst Filter Match; ‘src_dst_tcp_filter_not_match’: SrcDst Filter No Match; ‘src_dst_tcp_filter_action_blacklist’: SrcDst Filter Action Blacklist; ‘src_dst_tcp_filter_action_drop’: SrcDst Filter Action Drop; ‘src_dst_tcp_filter_action_default_pass’: SrcDst Filter Action Default Pass; ‘src_dst_tcp_filter_action_whitelist’: SrcDst Filter Action WL; ‘syn_auth_pass_wl’: TCP SYN Auth Pass WL; ‘tcp_out_of_seq_drop’: TCP Out-Of-Seq Dropped; ‘tcp_zero_window_drop’: TCP Zero-Window Dropped; ‘tcp_retransmit_drop’: TCP Retransmit Dropped; ‘tcp_per_conn_prate_exceed_bl’: TCP Conn Pkt Rate Blacklisted; ‘tcp_any_exceed’: TCP Exceeded; ‘tcp_drop_bl’: TCP Blacklist Packets Dropped; ‘tcp_frag_rcvd’: TCP Fragmented Packets Received; ‘tcp_frag_drop’: TCP Fragmented Packets Dropped; ‘tcp_auth_drop’: TCP Auth Dropped; ‘tcp_auth_resp’: TCP Auth Responded; ‘tcp_total_bytes_rcv’: TCP Total Bytes Received; ‘tcp_total_bytes_drop’: TCP Total Bytes Dropped; ‘tcp_action_on_ack_bl’: TCP ACK Retry Timeout Blacklisted; ‘tcp_action_on_syn_bl’: TCP SYN Retry Timeout Blacklisted; ‘tcp_per_conn_ofo_rate_exceed_drop’: TCP Conn Out-Of-Seq Rate Dropped; ‘tcp_per_conn_ofo_rate_exceed_bl’: TCP Conn Out-Of-Seq Rate Blacklisted; ‘tcp_per_conn_rexmit_rate_exceed_drop’: TCP Conn Retransmit Rate Dropped; ‘tcp_per_conn_rexmit_rate_exceed_bl’: TCP Conn Retransmit Rate Blacklisted; ‘tcp_per_conn_zwindow_rate_exceed_drop’: TCP Conn Zero-Window Rate Dropped; ‘tcp_per_conn_zwindow_rate_exceed_bl’: TCP Conn Zero-Window Rate Blacklisted; ‘tcp_syn_tfo_rcvd’: TCP SYN TFO Received;
Type: string
Supported Values: all, tcp_sess_create, intcp, tcp_syn_rcvd, tcp_invalid_syn_rcvd, tcp_syn_ack_rcvd, tcp_ack_rcvd, tcp_fin_rcvd, tcp_rst_rcvd, tcp_outrst, tcp_reset_client, tcp_reset_server, tcp_syn_rate, tcp_total_drop, tcp_dst_drop, tcp_exceed_drop_any_dst, tcp_exceed_drop_prate_dst, tcp_exceed_drop_crate_dst, tcp_exceed_drop_climit_dst, tcp_drop_black_dst, tcp_src_drop, tcp_exceed_drop_any_src, tcp_exceed_drop_prate_src, tcp_exceed_drop_crate_src, tcp_exceed_drop_climit_src, tcp_drop_black_src, tcp_drop_black_user_cfg_src, tcp_src_dst_drop, tcp_exceed_drop_any_src_dst, tcp_exceed_drop_prate_src_dst, tcp_exceed_drop_crate_src_dst, tcp_exceed_drop_climit_src_dst, tcp_drop_black_src_dst, tcp_drop_black_user_cfg_src_dst, tcp_port_zero_drop, tcp_syncookie_sent, tcp_syncookie_sent_fail, tcp_syncookie_check_fail, tcp_syncookie_hw_missing, tcp_syncookie_fail_bl, tcp_syncookie_pass, syn_auth_pass, syn_auth_skip, tcp_over_limit_syn_auth_dst, tcp_over_limit_syn_cookie_dst, tcp_over_limit_syn_auth_dst_port, tcp_over_limit_syn_cookie_dst_port, tcp_action_on_ack_start, tcp_action_on_ack_matched, tcp_action_on_ack_passed, tcp_action_on_ack_failed, tcp_action_on_ack_timeout, tcp_action_on_ack_reset, tcp_ack_no_syn, tcp_out_of_seq, tcp_zero_window, tcp_retransmit, tcp_rexmit_syn_limit_drop, tcp_zero_window_bl, tcp_out_of_seq_bl, tcp_retransmit_bl, tcp_rexmit_syn_limit_bl, tcp_per_conn_prate_exceed, tcp_action_on_ack_gap_drop, tcp_action_on_ack_gap_pass, tcp_new_conn_ack_retry_gap_start, tcp_new_conn_ack_retry_gap_passed, tcp_new_conn_ack_retry_gap_failed, tcp_new_conn_ack_retry_gap_timeout, tcp_new_conn_ack_retry_gap_reset, tcp_new_conn_ack_retry_gap_drop, tcp_action_on_syn_start, tcp_action_on_syn_passed, tcp_action_on_syn_failed, tcp_action_on_syn_timeout, tcp_action_on_syn_reset, tcp_action_on_syn_gap_drop, tcp_action_on_syn_gap_pass, tcp_unauth_rst_drop, dst_tcp_filter_match, dst_tcp_filter_not_match, dst_tcp_filter_action_blacklist, dst_tcp_filter_action_drop, dst_tcp_filter_action_default_pass, tcp_over_limit_syn_auth_src, tcp_over_limit_syn_auth_src_dst, tcp_over_limit_syn_cookie_src, tcp_over_limit_syn_cookie_src_dst, tcp_exceed_drop_brate_dst, tcp_exceed_drop_brate_src, tcp_exceed_drop_brate_src_dst, tcp_concurrent, dst_tcp_filter_action_whitelist, src_tcp_filter_match, src_tcp_filter_not_match, src_tcp_filter_action_blacklist, src_tcp_filter_action_drop, src_tcp_filter_action_default_pass, src_tcp_filter_action_whitelist, src_dst_tcp_filter_match, src_dst_tcp_filter_not_match, src_dst_tcp_filter_action_blacklist, src_dst_tcp_filter_action_drop, src_dst_tcp_filter_action_default_pass, src_dst_tcp_filter_action_whitelist, syn_auth_pass_wl, tcp_out_of_seq_drop, tcp_zero_window_drop, tcp_retransmit_drop, tcp_per_conn_prate_exceed_bl, tcp_any_exceed, tcp_drop_bl, tcp_frag_rcvd, tcp_frag_drop, tcp_auth_drop, tcp_auth_resp, tcp_total_bytes_rcv, tcp_total_bytes_drop, tcp_action_on_ack_bl, tcp_action_on_syn_bl, tcp_per_conn_ofo_rate_exceed_drop, tcp_per_conn_ofo_rate_exceed_bl, tcp_per_conn_rexmit_rate_exceed_drop, tcp_per_conn_rexmit_rate_exceed_bl, tcp_per_conn_zwindow_rate_exceed_drop, tcp_per_conn_zwindow_rate_exceed_bl, tcp_syn_tfo_rcvd
stats data¶
Counter | Size | Description | |
---|---|---|---|
tcp_rexmit_syn_limit_drop | 8 | TCP Retransmit SYN Exceed Dropped | |
tcp_reset_client | 8 | TCP Reset Client | |
tcp_syn_rcvd | 8 | TCP SYN Received | |
tcp_action_on_ack_timeout | 8 | TCP ACK Retry Timeout | |
tcp_port_zero_drop | 8 | TCP Port 0 Packets Dropped | |
src_dst_tcp_filter_action_whitelist | 8 | SrcDst Filter Action WL | |
tcp_auth_resp | 8 | TCP Auth Responded | |
syn_auth_skip | 8 | TCP SYN Auth Skipped | |
tcp_drop_black_user_cfg_src_dst | 8 | TCP SrcDst Blacklist User Packets Dropped | |
tcp_action_on_syn_start | 8 | TCP SYN Retry Init | |
tcp_per_conn_ofo_rate_exceed_drop | 8 | TCP Conn Out-Of-Seq Rate Dropped | |
tcp_action_on_ack_passed | 8 | TCP ACK Retry Passed | |
tcp_per_conn_prate_exceed | 8 | TCP Conn Pkt Rate Dropped | |
tcp_total_bytes_rcv | 8 | TCP Total Bytes Received | |
tcp_syncookie_hw_missing | 8 | TCP SYN Cookie HW Missed | |
tcp_per_conn_zwindow_rate_exceed_bl | 8 | TCP Conn Zero-Window Rate Blacklisted | |
tcp_zero_window_drop | 8 | TCP Zero-Window Dropped | |
dst_tcp_filter_not_match | 8 | Dst Filter No Match | |
tcp_sess_create | 8 | TCP Sessions Created | |
tcp_frag_drop | 8 | TCP Fragmented Packets Dropped | |
tcp_retransmit_bl | 8 | TCP Retransmit Blacklisted | |
dst_tcp_filter_action_blacklist | 8 | Dst Filter Action Blacklist | |
tcp_out_of_seq_drop | 8 | TCP Out-Of-Seq Dropped | |
tcp_frag_rcvd | 8 | TCP Fragmented Packets Received | |
tcp_drop_bl | 8 | TCP Blacklist Packets Dropped | |
tcp_action_on_ack_reset | 8 | TCP ACK Retry Timeout Reset | |
tcp_action_on_syn_bl | 8 | TCP SYN Retry Timeout Blacklisted | |
tcp_per_conn_ofo_rate_exceed_bl | 8 | TCP Conn Out-Of-Seq Rate Blacklisted | |
src_tcp_filter_action_default_pass | 8 | Src Filter Action Default Pass | |
tcp_auth_drop | 8 | TCP Auth Dropped | |
tcp_rst_rcvd | 8 | TCP RST Received | |
tcp_action_on_ack_gap_drop | 8 | TCP ACK Retry Retry-Gap Dropped | |
tcp_drop_black_user_cfg_src | 8 | TCP Src Blacklist User Packets Dropped | |
tcp_syn_tfo_rcvd | 8 | TCP SYN TFO Received | |
tcp_per_conn_prate_exceed_bl | 8 | TCP Conn Pkt Rate Blacklisted | |
tcp_zero_window | 8 | TCP Zero-Window Total | |
tcp_action_on_ack_failed | 8 | TCP ACK Retry Dropped | |
tcp_rexmit_syn_limit_bl | 8 | TCP Retransmit SYN Exceed Blacklisted | |
src_tcp_filter_action_drop | 8 | Src Filter Action Drop | |
tcp_out_of_seq_bl | 8 | TCP Out-Of-Seq Blacklisted | |
dst_tcp_filter_action_whitelist | 8 | Dst Filter Action WL | |
src_dst_tcp_filter_not_match | 8 | SrcDst Filter No Match | |
tcp_action_on_ack_start | 8 | TCP ACK Retry Init | |
tcp_any_exceed | 8 | TCP Exceeded | |
tcp_syncookie_fail_bl | 8 | TCP SYN Cookie Blacklist Failed | |
tcp_src_drop | 8 | TCP Src Packets Dropped | |
tcp_syncookie_sent_fail | 8 | TCP SYN Cookie Send Failed | |
tcp_dst_drop | 8 | TCP Dst Packets Dropped | |
syn_auth_pass_wl | 8 | TCP SYN Auth Pass WL | |
tcp_concurrent | 8 | TCP Concurrent Port Access | |
tcp_outrst | 8 | TCP Outbound RST | |
tcp_unauth_rst_drop | 8 | TCP Unauth RST Dropped | |
tcp_action_on_ack_bl | 8 | TCP ACK Retry Timeout Blacklisted | |
dst_tcp_filter_action_default_pass | 8 | Dst Filter Action Default Pass | |
tcp_per_conn_rexmit_rate_exceed_drop | 8 | TCP Conn Retransmit Rate Dropped | |
dst_tcp_filter_action_drop | 8 | Dst Filter Action Drop | |
syn_auth_pass | 8 | TCP SYN Auth Passed | |
tcp_syncookie_pass | 8 | TCP SYN Cookie Passed | |
tcp_ack_rcvd | 8 | TCP ACK Received | |
tcp_ack_no_syn | 8 | TCP ACK No SYN | |
src_dst_tcp_filter_action_drop | 8 | SrcDst Filter Action Drop | |
src_tcp_filter_action_whitelist | 8 | Src Filter Action WL | |
src_tcp_filter_action_blacklist | 8 | Src Filter Action Blacklist | |
src_dst_tcp_filter_match | 8 | SrcDst Filter Match | |
tcp_syn_rate | 8 | TCP SYN Rate Per Sec | |
src_tcp_filter_not_match | 8 | Src Filter No Match | |
src_dst_tcp_filter_action_default_pass | 8 | SrcDst Filter Action Default Pass | |
tcp_action_on_syn_failed | 8 | TCP SYN Retry Dropped | |
tcp_action_on_syn_gap_pass | 8 | TCP SYN Retry Retry-Gap Passed | |
tcp_syncookie_check_fail | 8 | TCP SYN Cookie Check Failed | |
src_dst_tcp_filter_action_blacklist | 8 | SrcDst Filter Action Blacklist | |
tcp_out_of_seq | 8 | TCP Out-Of-Seq Total | |
dst_tcp_filter_match | 8 | Dst Filter Match | |
src_tcp_filter_match | 8 | Src Filter Match | |
tcp_action_on_syn_reset | 8 | TCP SYN Retry Timeout Reset | |
tcp_action_on_syn_gap_drop | 8 | TCP SYN Retry Retry-Gap Dropped | |
tcp_reset_server | 8 | TCP Reset Server | |
tcp_invalid_syn_rcvd | 8 | TCP Invalid SYN Received | |
tcp_action_on_syn_passed | 8 | TCP SYN Retry Passed | |
tcp_zero_window_bl | 8 | TCP Zero-Window Blacklisted | |
tcp_fin_rcvd | 8 | TCP FIN Received | |
tcp_retransmit_drop | 8 | TCP Retransmit Dropped | |
tcp_total_drop | 8 | TCP Total Packets Dropped | |
tcp_syn_ack_rcvd | 8 | TCP SYN ACK Received | |
tcp_action_on_ack_gap_pass | 8 | TCP ACK Retry Retry-Gap Passed | |
tcp_per_conn_rexmit_rate_exceed_bl | 8 | TCP Conn Retransmit Rate Blacklisted | |
tcp_syncookie_sent | 8 | TCP SYN Cookie Sent | |
tcp_action_on_ack_matched | 8 | TCP ACK Retry Matched | |
tcp_retransmit | 8 | TCP Retransmit Total | |
tcp_src_dst_drop | 8 | TCP SrcDst Packets Dropped | |
tcp_total_bytes_drop | 8 | TCP Total Bytes Dropped | |
tcp_action_on_syn_timeout | 8 | TCP SYN Retry Timeout | |
intcp | 8 | TCP Total Packets Received | |
tcp_per_conn_zwindow_rate_exceed_drop | 8 | TCP Conn Zero-Window Rate Dropped |