ddos l4-ssl-zone-port stats¶

stats¶

Specification	Value
Type	object

ack_auth_fail

Description ACK Retry Dropped

Type: number

Format: counter

ack_retry_blacklist

Description ACK Retry Timeout Blacklisted

Type: number

Format: counter

ack_retry_gap_drop

Description ACK Retry Retry-Gap Dropped

Type: number

Format: counter

ack_retry_init

Description ACK Retry Init

Type: number

Format: counter

ack_retry_pass

Description ACK Retry Passed

Type: number

Format: counter

ack_retry_reset

Description ACK Retry Timeout Reset

Type: number

Format: counter

ack_retry_rto_fail

Description ACK Retry RTO Dropped

Type: number

Format: counter

ack_retry_rto_pass

Description ACK Retry RTO Passed

Type: number

Format: counter

ack_retry_rto_progress

Description ACK Retry RTO Progress

Type: number

Format: counter

ack_retry_timeout

Description ACK Retry Timeout

Type: number

Format: counter

addr_filter_bl

Description IP Filtering Policy: Blacklisted

Type: number

Format: counter

addr_filter_drop

Description IP Filtering Policy: Dropped

Type: number

Format: counter

auth_handshake_bl

Description Auth Handshake Blacklisted

Type: number

Format: counter

auth_handshake_fail

Description Auth Handshake Fail

Type: number

Format: counter

auth_handshake_success

Description Auth Handshake Success

Type: number

Format: counter

auth_handshake_timeout

Description Auth Handshake Timeout

Type: number

Format: counter

bl

Description Dst Blacklisted

Type: number

Format: counter

conn_close

Description Connections Closed

Type: number

Format: counter

conn_close_half_open

Description Half Open Connections Closed

Type: number

Format: counter

conn_close_w_fin

Description FIN Connections Closed

Type: number

Format: counter

conn_close_w_idle

Description Idle Connections Closed

Type: number

Format: counter

conn_close_w_rst

Description RST Connections Closed

Type: number

Format: counter

conn_create_from_ack

Description Connections Created From ACK

Type: number

Format: counter

conn_create_from_syn

Description Connections Created From SYN

Type: number

Format: counter

conn_create_from_synack

Description Connections Created From SYNACK

Type: number

Format: counter

conn_ofo_rate_excd

Description TCP Conn Out-Of-Seq Rate Exceeded

Type: number

Format: counter

conn_prate_excd

Description TCP Conn Pkt Rate Exceeded

Type: number

Format: counter

conn_rexmit_rate_excd

Description TCP Conn Retransmit Rate Exceeded

Type: number

Format: counter

conn_zwindow_rate_excd

Description TCP Conn Zero-Window Rate Exceeded

Type: number

Format: counter

create_conn_non_syn_dropped

Description Create Conn with non-SYN Packets Dropped

Type: number

Format: counter

current_es_level

Description Current Escalation Level

Type: number

Format: counter

do_auth_handshake

Description Auth Handshake

Type: number

Format: counter

drop_packet

Description Packets Dropped

Type: number

Format: counter

dst_hw_drop

Description Dst Hardware Packets Dropped

Type: number

Format: counter

dst_hw_drop_inserted

Description Dst Hardware Drop Rules Inserted

Type: number

Format: counter

dst_hw_drop_removed

Description Dst Hardware Drop Rules Removed

Type: number

Format: counter

dst_req_rate_exceed

Description Dst Request Rate Exceeded

Type: number

Format: counter

er_condition

Description Error Condition

Type: number

Format: counter

ew_inbound_port_byte_drop

Description East-West Inbound Bytes Dropped

Type: number

Format: counter

ew_inbound_port_byte_rcv

Description East-West Inbound Bytes Recevied

Type: number

Format: counter

ew_inbound_port_byte_sent

Description East-West Inbound Bytes Forwarded

Type: number

Format: counter

ew_inbound_port_drop

Description East-West Inbound Packets Dropped

Type: number

Format: counter

ew_inbound_port_rcv

Description East-West Inbound Packets Received

Type: number

Format: counter

ew_inbound_port_sent

Description East-West Inbound Packets Forwarded

Type: number

Format: counter

ew_outbound_port_byte_drop

Description East-West Outbound Bytes Forwarded

Type: number

Format: counter

ew_outbound_port_byte_rcv

Description East-West Outbound Bytes Recevied

Type: number

Format: counter

ew_outbound_port_byte_sent

Description East-West Outbound Bytes Dropped

Type: number

Format: counter

ew_outbound_port_drop

Description East-West Outbound Packets Dropped

Type: number

Format: counter

ew_outbound_port_rcv

Description East-West Outbound Packets Received

Type: number

Format: counter

ew_outbound_port_sent

Description East-West Outbound Packets Forwarded

Type: number

Format: counter

exceed_action_drop

Description Exceed Action: Dropped

Type: number

Format: counter

exceed_action_tunnel

Description Exceed Action: Tunnel

Type: number

Format: counter

exceed_drop_brate_src

Description Src KiBit Rate Exceeded

Type: number

Format: counter

exceed_drop_brate_src_pkt

Description Src KiBit Rate Exceeded Count

Type: number

Format: counter

exceed_drop_climit_src

Description Src Conn Limit Exceeded

Type: number

Format: counter

exceed_drop_crate_src

Description Src Conn Rate Exceeded

Type: number

Format: counter

exceed_drop_prate_src

Description Src Pkt Rate Exceeded

Type: number

Format: counter

filter1_match

Description Filter1 Match

Type: number

Format: counter

filter2_match

Description Filter2 Match

Type: number

Format: counter

filter3_match

Description Filter3 Match

Type: number

Format: counter

filter4_match

Description Filter4 Match

Type: number

Format: counter

filter5_match

Description Filter5 Match

Type: number

Format: counter

filter_action_blacklist

Description Filter Action Blacklist

Type: number

Format: counter

filter_action_default_pass

Description Filter Action Default Pass

Type: number

Format: counter

filter_action_drop

Description Filter Action Drop

Type: number

Format: counter

filter_action_whitelist

Description Filter Action WL

Type: number

Format: counter

filter_auth_fail

Description Filter Auth Failed

Type: number

Format: counter

filter_none_match

Description Filter No Match

Type: number

Format: counter

filter_total_not_match

Description Filter Not Matched on Pkt

Type: number

Format: counter

frag_drop

Description Fragmented Packets Dropped

Type: number

Format: counter

frag_rcvd

Description Fragmented Packets Received

Type: number

Format: counter

frag_timeout

Description Fragmented Packets Timeout

Type: number

Format: counter

is_renegotiation

Description SSL Renegotiation

Type: number

Format: counter

is_ssl3

Description SSL v3

Type: number

Format: counter

is_tls1_0

Description TLS v1.0

Type: number

Format: counter

is_tls1_1

Description TLS v1.1

Type: number

Format: counter

is_tls1_2

Description TLS v1.2

Type: number

Format: counter

new_syn

Description TCP SYN

Type: number

Format: counter

no_policy_class_list_match

Description No Policy Class-list Match

Type: number

Format: counter

no_route_drop

Description No Route Dropped

Type: number

Format: counter

out_of_seq_excd

Description Out-Of-Seq Exceeded

Type: number

Format: counter

outbound_port_bytes

Description Outbound Bytes Received

Type: number

Format: counter

outbound_port_bytes_drop

Description Outbound Bytes Dropped

Type: number

Format: counter

outbound_port_bytes_sent

Description Outbound Bytes Forwarded

Type: number

Format: counter

outbound_port_drop

Description Outbound Packets Dropped

Type: number

Format: counter

outbound_port_pkt_sent

Description Outbound Packets Forwarded

Type: number

Format: counter

outbound_port_rcvd

Description Outbound Packets Received

Type: number

Format: counter

pattern_filter1_match

Description Extracted Filter1 Match

Type: number

Format: counter

pattern_filter2_match

Description Extracted Filter2 Match

Type: number

Format: counter

pattern_filter3_match

Description Extracted Filter3 Match

Type: number

Format: counter

pattern_filter4_match

Description Extracted Filter4 Match

Type: number

Format: counter

pattern_filter5_match

Description Extracted Filter5 Match

Type: number

Format: counter

pattern_filter_drop

Description Extracted Filter Drop

Type: number

Format: counter

pattern_not_found

Description Pattern Recognition: Pattern Not Found

Type: number

Format: counter

pattern_recognition_generic_error

Description Pattern Recognition: Exceptions

Type: number

Format: counter

pattern_recognition_pattern_changed

Description Pattern Recognition: Pattern Change Detected

Type: number

Format: counter

pattern_recognition_proceeded

Description Pattern Recognition: Engine Started

Type: number

Format: counter

pattern_recognition_sampling_started

Description Pattern Recognition: Sampling Started

Type: number

Format: counter

policy_drop

Description Policy Dropped

Type: number

Format: counter

policy_reset

Description Policy Reset

Type: number

Format: counter

port_bytes

Description Inbound Bytes Received

Type: number

Format: counter

port_bytes_drop

Description Inbound Bytes Dropped

Type: number

Format: counter

port_bytes_sent

Description Inbound Bytes Forwarded

Type: number

Format: counter

port_conn_limm_exceed

Description Conn Limit Exceeded

Type: number

Format: counter

port_conn_rate_exceed

Description Conn Rate Exceeded

Type: number

Format: counter

port_drop

Description Inbound Packets Dropped

Type: number

Format: counter

port_kbit_rate_exceed

Description KiBit Rate Exceeded

Type: number

Format: counter

port_kbit_rate_exceed_pkt

Description KiBit Rate Exceeded Count

Type: number

Format: counter

port_pkt_rate_exceed

Description Packet Rate Exceeded

Type: number

Format: counter

port_pkt_sent

Description Inbound Packets Forwarded

Type: number

Format: counter

port_rcvd

Description Inbound Packets Received

Type: number

Format: counter

port_src_bl

Description Src Blacklisted

Type: number

Format: counter

port_src_escalation

Description Src Escalation

Type: number

Format: counter

port_syn_rate_exceed

Description TCP SYN Rate Exceeded

Type: number

Format: counter

port_synack_rate_exceed

Description TCP SYNACK Rate Exceeded

Type: number

Format: counter

processed

Description Packets Processed

Type: number

Format: counter

prog_conn_exceed_bl

Description Connection: Violation Exceed Blacklisted

Type: number

Format: counter

prog_conn_exceed_drop

Description Connection: Violation Exceed Dropped

Type: number

Format: counter

prog_conn_exceed_reset

Description Connection: Violation Exceed Reset

Type: number

Format: counter

prog_conn_rcvd_exceed

Description Connection: Received Exceed

Type: number

Format: counter

prog_conn_rcvd_sent_ratio_exceed

Description Connection: Reveived to Sent Ratio Exceed

Type: number

Format: counter

prog_conn_samples

Description Sample Collected: Connection

Type: number

Format: counter

prog_conn_samples_processed

Description Sample Processed: Connnection

Type: number

Format: counter

prog_conn_sent_exceed

Description Connection: Sent Exceed

Type: number

Format: counter

prog_conn_time_exceed

Description Connection: Time Exceed

Type: number

Format: counter

prog_exceed_bl

Description Req-Resp: Violation Exceed Blacklisted

Type: number

Format: counter

prog_exceed_drop

Description Req-Resp: Violation Exceed Dropped

Type: number

Format: counter

prog_exceed_reset

Description Req-Resp: Violation Exceed Reset

Type: number

Format: counter

prog_first_req_time_exceed

Description Req-Resp: First Request Time Exceed

Type: number

Format: counter

prog_req_resp_time_exceed

Description Req-Resp: Request to Response Time Exceed

Type: number

Format: counter

prog_req_samples

Description Sample Collected: Req-Resp

Type: number

Format: counter

prog_req_samples_processed

Description Sample Processed: Req-Resp

Type: number

Format: counter

prog_request_len_exceed

Description Req-Resp: Request Length Exceed

Type: number

Format: counter

prog_resp_req_ratio_exceed

Description Req-Resp: Response to Request Ratio Exceed

Type: number

Format: counter

prog_resp_req_time_exceed

Description Req-Resp: Response to Request Time Exceed

Type: number

Format: counter

prog_response_len_exceed

Description Req-Resp: Response Length Exceed

Type: number

Format: counter

prog_win_exceed_bl

Description Time Window: Violation Exceed Blacklisted

Type: number

Format: counter

prog_win_exceed_drop

Description Time Window: Violation Exceed Dropped

Type: number

Format: counter

prog_win_exceed_reset

Description Time Window: Violation Exceed Reset

Type: number

Format: counter

prog_win_rcvd_exceed

Description Time Window: Received Exceed

Type: number

Format: counter

prog_win_rcvd_sent_ratio_exceed

Description Time Window: Received to Sent Exceed

Type: number

Format: counter

prog_win_samples

Description Sample Collected: Time Window

Type: number

Format: counter

prog_win_samples_processed

Description Sample Processed: Time Window

Type: number

Format: counter

prog_win_sent_exceed

Description Time Window: Sent Exceed

Type: number

Format: counter

renegotiation_exceed

Description Renegotiation Exceeded

Type: number

Format: counter

renegotiation_incomplete

Description Renegotiation Incomplete

Type: number

Format: counter

reset_while_other_in_handshake

Description Reset While Others in Handshake

Type: number

Format: counter

retransmit_excd

Description Retransmit Exceeded

Type: number

Format: counter

rst_cookie_fail

Description RST Cookie Failed

Type: number

Format: counter

secondary_port_conn_limm_exceed

Description Per Addr-Port Conn Limit Exceeded

Type: number

Format: counter

secondary_port_conn_rate_exceed

Description Per Addr-Port Conn Rate Exceeded

Type: number

Format: counter

secondary_port_hit

Description Per Addr-Port Hit

Type: number

Format: counter

secondary_port_kbit_rate_exceed

Description Per Addr-Port KiBit Rate Exceeded

Type: number

Format: counter

secondary_port_kbit_rate_exceed_pkt

Description Per Addr-Port KiBit Rate Exceeded Count

Type: number

Format: counter

secondary_port_pkt_rate_exceed

Description Per Addr-Port Packet Rate Exceeded

Type: number

Format: counter

sess_aged

Description Sessions Aged Out

Type: number

Format: counter

sess_create

Description Session Create

Type: number

Format: counter

sess_create_inbound

Description Inbound Sessions Created

Type: number

Format: counter

sess_create_outbound

Description Outbound Sessions Created

Type: number

Format: counter

sflow_external_packets_sent

Description Sflow External Packets Sent

Type: number

Format: counter

sflow_external_samples_packed

Description Sflow External Samples Packed

Type: number

Format: counter

sflow_internal_packets_sent

Description Sflow Internal Packets Sent

Type: number

Format: counter

sflow_internal_samples_packed

Description Sflow Internal Samples Packed

Type: number

Format: counter

snat_fail

Description Source NAT Failure

Type: number

Format: counter

src_ack_auth_fail

Description Src ACK Retry Dropped

Type: number

Format: counter

src_ack_retry_blacklist

Description Src ACK Retry Timeout Blacklisted

Type: number

Format: counter

src_ack_retry_gap_drop

Description Src ACK Retry Retry-Gap Dropped

Type: number

Format: counter

src_ack_retry_init

Description Src ACK Retry Init

Type: number

Format: counter

src_ack_retry_reset

Description Src ACK Retry Timeout Reset

Type: number

Format: counter

src_ack_retry_rto_fail

Description Src ACK Retry RTO Dropped

Type: number

Format: counter

src_ack_retry_rto_pass

Description Src ACK Retry RTO Passed

Type: number

Format: counter

src_ack_retry_rto_progress

Description Src ACK Retry RTO Progress

Type: number

Format: counter

src_ack_retry_timeout

Description Src ACK Retry Timeout

Type: number

Format: counter

src_auth_drop

Description Src TCP Auth Dropped

Type: number

Format: counter

src_conn_ofo_rate_excd

Description Src TCP Conn Out-Of-Seq Rate Exceeded

Type: number

Format: counter

src_conn_pkt_rate_excd

Description Src TCP Conn Pkt Rate Exceeded

Type: number

Format: counter

src_conn_rexmit_rate_excd

Description Src TCP Conn Retransmit Rate Exceeded

Type: number

Format: counter

src_conn_zwindow_rate_excd

Description Src TCP Conn Zero-Window Rate Exceeded

Type: number

Format: counter

src_create_conn_non_syn_dropped

Description Src Create Conn with non-SYN Packets Dropped

Type: number

Format: counter

src_drop

Description Src Packets Dropped

Type: number

Format: counter

src_drop_packet

Description Src Packets Dropped

Type: number

Format: counter

src_filter1_match

Description Src Filter1 Match

Type: number

Format: counter

src_filter2_match

Description Src Filter2 Match

Type: number

Format: counter

src_filter3_match

Description Src Filter3 Match

Type: number

Format: counter

src_filter4_match

Description Src Filter4 Match

Type: number

Format: counter

src_filter5_match

Description Src Filter5 Match

Type: number

Format: counter

src_filter_action_blacklist

Description Src Filter Action Blacklist

Type: number

Format: counter

src_filter_action_default_pass

Description Src Filter Action Default Pass

Type: number

Format: counter

src_filter_action_drop

Description Src Filter Action Drop

Type: number

Format: counter

src_filter_action_whitelist

Description Src Filter Action WL

Type: number

Format: counter

src_filter_auth_fail

Description Src Filter Auth Failed

Type: number

Format: counter

src_filter_none_match

Description Src Filter No Match

Type: number

Format: counter

src_filter_total_not_match

Description Src Filter Not Matched on Pkt

Type: number

Format: counter

src_frag_drop

Description Src Fragmented Packets Dropped

Type: number

Format: counter

src_hw_drop

Description Src Hardware Packets Dropped

Type: number

Format: counter

src_hw_drop_inserted

Description Src Hardware Drop Rules Inserted

Type: number

Format: counter

src_hw_drop_removed

Description Src Hardware Drop Rules Removed

Type: number

Format: counter

src_learn_overflow

Description Source Dynamic Entry Overflow

Type: number

Format: counter

src_out_of_seq_excd

Description Src Out-Of-Seq Exceeded

Type: number

Format: counter

src_policy_reset

Description Src Policy Reset

Type: number

Format: counter

src_req_rate_exceed

Description Src Request Rate Exceeded

Type: number

Format: counter

src_retransmit_excd

Description Src Retransmit Exceeded

Type: number

Format: counter

src_rst_cookie_fail

Description Src RST Cookie Failed

Type: number

Format: counter

src_ssl_auth_drop

Description Src SSL Auth Dropped

Type: number

Format: counter

src_syn_auth_fail

Description Src SYN Auth Failed

Type: number

Format: counter

src_syn_cookie_fail

Description Src SYN Cookie Failed

Type: number

Format: counter

src_syn_cookie_sent

Description Src SYN Cookie Sent

Type: number

Format: counter

src_syn_rate_exceed

Description Src TCP SYN Rate Exceeded

Type: number

Format: counter

src_syn_retry_blacklist

Description Src SYN Retry Timeout Blacklisted

Type: number

Format: counter

src_syn_retry_failed

Description Src SYN Retry Dropped

Type: number

Format: counter

src_syn_retry_gap_drop

Description Src SYN Retry-Gap Dropped

Type: number

Format: counter

src_syn_retry_init

Description Src SYN Retry Init

Type: number

Format: counter

src_syn_retry_reset

Description Src SYN Retry Timeout Reset

Type: number

Format: counter

src_syn_retry_rto_fail

Description Src SYN Retry RTO Dropped

Type: number

Format: counter

src_syn_retry_rto_pass

Description Src SYN Retry RTO Passed

Type: number

Format: counter

src_syn_retry_rto_progress

Description Src SYN Retry RTO Progress

Type: number

Format: counter

src_syn_retry_timeout

Description Src SYN Retry Timeout

Type: number

Format: counter

src_tcp_auth_rst

Description Src TCP Auth Reset

Type: number

Format: counter

src_unauth_drop

Description Src TCP Unauth Dropped

Type: number

Format: counter

src_well_known_port

Description Src TCP SrcPort Wellknown

Type: number

Format: counter

src_zero_window_excd

Description Src Zero-Window Exceeded

Type: number

Format: counter

src_zone_service_entry_aged

Description SrcZoneService Entry Aged

Type: number

Format: counter

src_zone_service_entry_learned

Description SrcZoneService Entry Learned

Type: number

Format: counter

ssl_auth_drop

Description SSL Auth Dropped

Type: number

Format: counter

ssl_auth_resp

Description SSL Auth Responded

Type: number

Format: counter

ssl_bad_header_drop

Description SSL Traffic Check Bad Header Dropped

Type: number

Format: counter

ssl_bad_header_forw

Description SSL Traffic Check Bad Header Forwarded

Type: number

Format: counter

ssl_port_bad_len

Description SSL Header Bad Length

Type: number

Format: counter

ssl_port_bad_ver

Description SSL Header Bad Version

Type: number

Format: counter

ssl_port_invalid_type

Description SSL Header Invalid Type

Type: number

Format: counter

ssl_port_non_tls

Description SSL Non-TLS Dropped

Type: number

Format: counter

syn_auth_fail

Description SYN Auth Failed

Type: number

Format: counter

syn_auth_pass

Description SYN Auth Passed

Type: number

Format: counter

syn_auth_rst_ack_drop

Description SYN Auth RST-ACK Dropped

Type: number

Format: counter

syn_cookie_fail

Description SYN Cookie Failed

Type: number

Format: counter

syn_cookie_sent

Description SYN Cookie Sent

Type: number

Format: counter

syn_drop

Description SYN Dropped

Type: number

Format: counter

syn_retry_blacklist

Description SYN Retry Timeout Blacklisted

Type: number

Format: counter

syn_retry_failed

Description SYN Retry Dropped

Type: number

Format: counter

syn_retry_gap_drop

Description SYN Retry-Gap Dropped

Type: number

Format: counter

syn_retry_init

Description SYN Retry Init

Type: number

Format: counter

syn_retry_pass

Description SYN Retry Passed

Type: number

Format: counter

syn_retry_reset

Description SYN Retry Timeout Reset

Type: number

Format: counter

syn_retry_rto_fail

Description SYN Retry RTO Dropped

Type: number

Format: counter

syn_retry_rto_pass

Description SYN Retry RTO Passed

Type: number

Format: counter

syn_retry_rto_progress

Description SYN Retry RTO Progress

Type: number

Format: counter

syn_retry_timeout

Description SYN Retry Timeout

Type: number

Format: counter

syn_tfo_rcv

Description SYN TFO Received

Type: number

Format: counter

synack_multiple_attempts_per_ip_detected

Description SYNACK Multiple Attempts Per IP Detected

Type: number

Format: counter

synack_reset_sent

Description SYNACK Reset Sent

Type: number

Format: counter

tcp_auth_drop

Description TCP Auth Dropped

Type: number

Format: counter

tcp_auth_resp

Description TCP Auth Responded

Type: number

Format: counter

tcp_auth_rst

Description TCP Auth Reset

Type: number

Format: counter

tcp_rexmit_syn_limit_bl

Description TCP SYN Retransmit Exceeded Blacklist

Type: number

Format: counter

tcp_rexmit_syn_limit_drop

Description TCP SYN Retransmit Exceeded Drop

Type: number

Format: counter

unauth_drop

Description TCP Unauth Dropped

Type: number

Format: counter

unauth_src_session_reset

Description Session Reset for Unauthenticated Src

Type: number

Format: counter

wellknown_sport_drop

Description TCP SrcPort Wellknown

Type: number

Format: counter

zero_window_excd

Description Zero-Window Exceeded

Type: number

Format: counter