< Home

display stream-reassemble configuration

Function

The display stream-reassemble configuration command displays the global TCP stream reassembly configuration.

Format

display stream-reassemble configuration [ slot slot-id cpu cpu-id ]

Parameters

Parameter Description Value
slot slot-id

Specifies a slot ID.

The value range depends on the device configuration.

cpu cpu-id

Specifies a CPU ID.

The value range depends on the device configuration.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Before running this command, you must run the defence engine enable command to enable the IAE.

Example

# Display the global TCP stream reassembly configuration.

<HUAWEI> display stream-reassemble configuration
Stream reassemble configuration on slot 0 cpu 0 :
------------------------------------------------------------------------------
Stream Reassembly Configuration:
------------------------------------------------------------
  enable                : on
  overflow-mode         : discard
  overlap-mode          : overwrite
  session-cache(KB)     : 16
  total-cache(packets)  : 1000
  timestamp-check       : true
  tcp-option check      : true
  defense-check         : on
  session-timeout(s)    : 60
  enhanced-mode         : on
------------------------------------------------------------
Table 1 Description of the display stream-reassemble configuration command output

Item

Description

Stream reassemble configuration on slot 0 cpu 0

TCP stream reassembly configuration on slot 0 cpu 0.

enable

Indicates the state of the TCP stream reassembly function.

  • on: The function is enabled.
  • off: The function is disabled.

overflow-mode

Indicates the method for handling packets arriving at a full buffer in stream reassembly.

  • discard: Packets arriving at a full buffer are discarded.
  • forward: Packets arriving at a full buffer are forwarded straight through.

overlap-mode

Indicates the policy to handle overlapping packets:

  • overwrite: Indicate overwrite the original overlapped part.
  • preserve: Indicate preserve the original overlapped part.

session-cache(KB)

Indicates the buffer size in KB for each session in TCP stream reassembly.

total-cache(packets)

Global buffer size in number of packets in stream reassembly.

timestamp-check

Indicates the state of the timestamp check function.

  • true: The function is enabled.
  • false: The function is disabled.

tcp-option check

Indicates the state of the TCP option check function.

  • true: The function is enabled.
  • false: The function is disabled.

defense-check

Indicates the status of the TCP attack defense function:

  • on: The function is enabled.
  • off: The function is disabled.

session-timeout(s)

Indicates the timeout of out-of-sequence TCP packet inspection, in seconds.

enhanced-mode

Status of enhanced traffic reassembly:

  • on: The function is enabled.
  • off: The function is disabled.
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >