display deception statistics

Function

The display deception statistics command displays deception statistics.

Format

display deception statistics

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To clear deception statistics, run the reset deception statistics command. Then, run the display deception statistics command to view deception statistics in this period.

Example

# Display deception statistics.

<HUAWEI> display deception statistics
Dataplane normal statistics information:                                        
   Receive local ip pkts                                       : 9466           
   Receive arp request pkts                                    : 143087         
   Receive arp reply pkts                                      : 8671           
   Receive don't need check pkts                               : 9471           
   Receive from decoy pkts                                     : 18605          
   Receive from decoy reg acks                                 : 14884          
   Receive from decoy heartbeats                               : 3721           
   Constructor arp request pkts                                : 8216           
   Constructor arp reply pkts                                  : 3860           
   Send to decoy pkts                                          : 14884          
   Send to decoy regs                                          : 14884          
   Send channel success pkts                                   : 12076          
 Dataplane discard statistics information:                                       
   Send to decoy failed logs                                   : 226            
   VPN header illegal packets discarded                        : 14884          
 Dataplane error statistics information:

**Table 1** Description of the **display deception statistics** command output
Item	Description
Mgmtplane statistics information	Statistics about the management plane.
Rpc msg send success	Number of RPC messages that have been successfully sent.
Rpc msg recv success	Number of RPC messages that have been successfully received.
Rpc msg send instance not exist	Number of RPC messages that fail to be sent because the instance does not exist.
Rpc msg recv poll failed	Statistics about message query failures on the receiver.
Receive RPC msg	Number of received RPC messages.
Send RPC msg success	Number of RPC messages that have been successfully sent.
Dataplane normal statistics information	Statistics on normal packets
ReceiveRPCmsg	Number of received RPC messages
SendRPCmsgsuccess	Number of RPC messages that have been successfully sent
Receive total pkts	Number of received packets
Receive VLAN pkts	Number of received packets with VLAN tags
Receive local ip pkts	Number of packets destined for the local device or packets sent from the local device
Receive arp request pkts	Number of received ARP requests
Receive arp reply pkts	Number of received ARP replies
Receive offline ip icmp pkts	Number of received ICMP packets whose destination IP addresses are offline
Receive offline ip tcp pkts	Number of received TCP packets whose destination IP addresses are offline
Receive tcp syn pkts	Number of received SYN packets
Receive tcp syn ack pkts	Number of received SYN ACK packets
Receive tcp rst pkts	Number of received RST packets
Receive tcp decoy network pkts	Number of received packets that match the bait network segment
Receive don't need check pkts	Number of packets that do not need to be checked
Receive match acl	Number of packets that match ACLs
Receive from decoy pkts	Number of received packets from the Decoy
Receive arp consult pkts	Number of received ARP negotiation packets
Receive arp notify enable pkts	Number of received ARP notification enabling packets
Receive arp notify undo enable pkts	Number of received ARP notification disabling packets
Receive from decoy forward pkts	Number of received packets forwarded by the Decoy
Receive from decoy reg acks	Number of received registration reply packets from the Decoy
Receive from decoy update decoy ports	Number of packets received from the Decoy for updating the honeypot service port
Receive from decoy heartbeats	Number of received heartbeat packets from the Decoy
Receive total dns pkts	Number of received DNS packets
Receive dns request aci pkts	Number of received DNS packets with the ACI suffix
Receive aci syn pkts	Number of received SYN packets matching ACI entries
Constructor arp request pkts	Number of constructed ARP requests
Constructor arp reply pkts	Number of constructed ARP replies
Send to decoy pkts	Number of packets sent to the Decoy
Send to decoy forward pkts	Number of packets forwarded to the Decoy
Send to decoy regs	Number of registration packets sent to the Decoy
Send to decoy heartbeats	Number of heartbeat packets sent to the Decoy
Send to decoy logs	Number of log packets sent to the Decoy
Add ip state to decoy	Number of IP address status adding messages sent to the Decoy
Delete ip state to decoy	Number of IP address status deleting messages sent to the Decoy
Update ip state to decoy	Number of IP address status updating messages sent to the Decoy
Send to decoy iplist	Number of IP status packets sent to the Decoy
Send to decoy redirect	Number of packets redirected to the Decoy
Send scan reply to decoy	Number of scan response packets sent to the Decoy
Send channel success pkts	Number of packets successfully sent through the channel
Constructor icmp reply pkts	Number of constructed ICMP replies
Constructor tcp syn pkts	Number of constructed TCP SYN packets
Constructor arp consult pkts	Number of constructed ARP negotiation packets
Constructor arp notify enable pkts	Number of constructed ARP notification enabling packets
Constructor arp notify undo enable pkts	Number of constructed ARP notification disabling packets
Dns answer query pkts for aci	Number of DNS request packets responded using the ACI function
Dns answer respond pkts	Number of DNS reply packets modified using the ACI function
Aci forward syn pkts	Number of SYN packets forwarded using the ACI function
Aci decoy syn pkts	Number of SYN packets discarded or deceived using the ACI function
Send subnet	Number of times that subnet information is sent to the Decoy
Subnet add	Number of subnet information adding messages sent to the Decoy
Subnet del	Number of subnet information deleting messages sent to the Decoy
Dataplane discard statistics information	Statistics on discarded packets
Send RPC msg failed	Number of RPC messages that fail to be sent
Run RPC msg failed	Number of RPC message errors
Send channel failed pkts	Number of packets discarded due to transmission failures on the channel
Arp malloc node failed pkts	Number of packets discarded due to ARP table node application failures
Ip port table malloc node failed pkts	Number of packets discarded due to port table node application failures
Attack weight table malloc node failed pkts	Number of packets discarded due to attack weight table node application failures.
Arp redirect node exhaustion	Number of times when the ARP table node is full.
Get port info failed pkts	Number of packets discarded due to interface information obtaining failures
Hash length limit pkts	Number of packets discarded due to long hash table chains
Send to decoy failed pkts	Number of packets that fail to be sent to the Decoy
Send to decoy failed forward pkts	Number of packets that fail to be forwarded to the Decoy
Send to decoy failed regs	Number of registration packets that fail to be sent to the Decoy
Send to decoy failed heartbeats	Number of heartbeat packets that fail to be sent to the Decoy
Send to decoy failed logs	Number of log packets that fail to be sent to the Decoy
Send to decoy failed iplist	Number of IP status packets that fail to be sent to the Decoy
Send to decoy failed redirect	Number of packets that fail to be redirected to the Decoy
Send to attacker failed pkts	Number of packets that fail to be sent to the attacker
Smbuf malloc failed	Number of packets discarded due to Smbuf application failures
ARP header illegal packets discarded	Number of packets discarded due to invalid ARP headers
IP header illegal packets discarded	Number of packets discarded due to invalid IP headers
IP frag packets discarded	Number of discarded IP fragments
TCP header illegal packets discarded	Number of packets discarded due to invalid TCP headers
VPN header illegal packets discarded	Number of packets discarded due to invalid VPN headers
Arp extend type illegal packets discarded	Statistics of packets discarded due to invalid ARP extended types
Log cache num limit not merge	Number of logs that are not merged when the number of cached logs reaches the upper limit
Log cache num limit not send	Number of logs that are not sent when the number of cached logs reaches the upper limit
Aci node exhaustion	Number of ACI entry creation failures due to insufficient ACI cache resources
Aci source ip limit add fail	Number of ACI entry creation failures due to the limit on the number of source addresses that can be cached
Dns node exhaustion	Number of DNS entry creation failures due to insufficient DNS cache resources
Send subnet fai	Number of times that subnet information fails to be sent.
Smbuf pool exhaustion	Number of Smbuf resource application failures due to Smbuf resource exhaustion
Smbuf pool head null	Number of Smbuf resource application failures due to an empty Smbuf resource head
Smbuf pool bad safemask	Number of Smbuf resource application failures due to an incorrect header verification value of the Smbuf resource
Smbuf pool bad free flag	Number of Smbuf resource application failures due to an incorrect release verification value of the Smbuf resource
Dataplane error statistics information	Error statistics