Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
C-94
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix C Troubleshooting
Gathering Information
Understanding the show statistics Command
The show statistics command provides a snapshot of the state of the sensor services. The following
services provide statistics:
AnalysisEngine
Authentication
Denied Attackers
Event Server
Event Store
Host
Logger
Attack Response (formerly known as Network Access)
Notification
SDEE Server
Transaction Server
Transaction Source
Virtual Sensor
Web Server
Note To get the same information from IDM, choose Monitoring > Sensor Monitoring > Support
Information > Statistics. To get the same information from IME, choose Configuration >
sensor_name > Sensor Monitoring > Support Information >Statistics.
Displaying Statistics
Use the show statistics [analysis-engine | anomaly-detection | authentication | denied-attackers |
event-server | event-store | external-product-interface | global-correlation | host | logger |
network-access | notification | os-identification | sdee-server | transaction-server | virtual-sensor |
web-server] [clear] command to display statistics for each sensor application.
Use the show statistics {anomaly-detection | denied-attackers | os-identification | virtual-sensor}
[name | clear] command to display statistics for these components for all virtual sensors. If you provide
the virtual sensor name, the statistics for that virtual sensor only are displayed.
Note The clear option is not available for the analysis engine, anomaly detection, host, network access, or OS
identification applications.
For the IPS 4510 and IPS 4520, at the end of the command output, there are extra details for the Ethernet
controller statistics, such as the total number of packets received at the Ethernet controller, the total
number of packets dropped at the Ethernet controller under high load conditions, and the total packets
transmitted including the customer traffic packets and the internal keepalive packet count.