Filter
Top Products
This section contains the following topics:
■ Monitoring Stateful Firewall Statistics on page 137
■ Monitoring Stateful Firewall Filters on page 138
■ Monitoring Firewall Intrusion Detection Services (IDS) on page 139
Monitoring Stateful Firewall Statistics
To view stateful firewall filter statistics in the J-Web interface, select
Monitor>Firewall>Statistics Summary. Alternatively, enter the CLI command show
services stateful-firewall statistics.
Table 70 on page 137 summarizes key output fields for stateful firewall filter statistics.
Table 70: Summary of Key Stateful Firewall Statistics Output Fields
ValuesField
Name of the services interface on which the service set is applied.Interface
Name of the service set.Service Set
Number of packets accepted by all rules defined in the service set.Accept
Number of packets discarded by all rules defined in the service set.Discard
Number of packets rejected by all rules defined in the service set.Reject
Number of packets matching rules defined in new flows:
■
Accept—Number of packets accepted.
■
Discards—Number of packets discarded.
■
Rejects—Number of packets rejected.
New flows
Number of packets matching rules defined in existing flows:
■
Accept—Number of packets accepted.
■
Discards—Number of packets discarded.
■
Rejects—Number of packets rejected.
Existing flows
Number of packets dropped due to the following match conditions:
■
IP Option—Number of packets dropped due to the inspection of the IP options field of the
packet.
■
TCP SYN Defense—Number of packets dropped due to the SYN defender, which prevents
denial-of-service (DoS) attacks.
■
NAT Ports Exhausted—Number of packets dropped because the router has no available NAT
ports to assign for a given source address.
For more information about these match conditions, see the J-series Services Router Advanced WAN
Access Configuration Guide and the JUNOS Services Interfaces Configuration Guide.
Drops
Using the Monitoring Tools ■ 137
Chapter 7: Monitoring the Router and Routing Operations