display ipsec statistics

Function

The display ipsec statistics command displays the statistics about packets processed by IPSec.

Format

display ipsec statistics [ sa-name sa-name slot slot-number ]

Parameters

Parameter	Description	Value
sa-name sa-name	Specifies the IPSec Security Association (SA) name.	The value is an existing SA name.
slot slot-number	Displays the IPSec SA statistics of the specified slot.	The value is an integer, and the value range depends on the device configuration.

Views

All views

Default Level

1: Monitoring Level

Usage Guidelines

Usage Scenario

After configuring IPSec, you can run the display ipsec statistics command to view information about transmitted packets and dropped packets. The details are as follows:

Number of received and sent packets
Number of received and sent bytes
Number of dropped incoming and outgoing packets
Detailed information about dropped packets

Example

# Display statistics about packets processed by IPSec.

<HUAWEI> display ipsec statistics
  IPv6 security packet statistics:
    input/output security packets: 0/0
    input/output security bytes: 0/0
    input/output dropped security packets: 0/0
    dropped security packet detail:
      memory process problem: 0
      can't find SA: 0
      queue is full: 0
      authentication is failed: 0
      wrong length: 0
      replay packet: 0
      too long packet: 0
      invalid SA: 0
      policy deny: 0
  the normal packet statistics:
    input/output dropped normal packets: 0/0
  IPv4 security packet statistics:
    input/output security packets: 0/0
    input/output security bytes: 0/0
    input/output dropped security packets: 0/0
    dropped security packet detail:
      memory process problem: 0
      can't find SA: 0
      queue is full: 0
      authentication is failed: 0
      wrong length: 0
      replay packet: 0
      too long packet: 0
      invalid SA: 0
      policy deny: 0
  the normal packet statistics:
    input/output dropped normal packets: 0/0

**Table 1** Description of the **display ipsec statistics** command output
Item	Description
IPv6 security packet statistics	Statistics on IPv6 security packets.
IPv4 security packet statistics	Statistics on IPv4 security packets.
input/output security packets	Indicates the number of received and sent packets.
input/output security bytes	Indicates the number of received and sent bytes.
input/output dropped security packets	Indicates the number of dropped incoming and outgoing packets.
dropped security packet detail	Detailed information about dropped packets.
memory process problem	Indicates the number of packets that are dropped due to a memory fault.
can't find SA	Indicates the number of packets that are dropped because no SA is found.
queue is full	Indicates the number of packets that are dropped because the queue is full.
authentication is failed	Indicates the number of packets that are dropped due to authentication failure.
wrong length	Indicates the number of packets that are dropped due to a packet length fault.
replay packet	Indicates the number of packets that are dropped due to repeated transmission.
too long packet	Indicates the number of packets that are dropped due to excess packet length.
invalid SA	Indicates the number of packets that are dropped due to an invalid SA.
policy deny	Indicates the number of packets that are dropped due to a deny action in the policy.
the normal packet statistics	Statistics about normal packets.
input/output dropped normal packets	Indicates the number of received/sent normal packets that are dropped.