Displaying IP statistics

You can use the ipsec stats command to verify IPsec configuration, monitor protocol processing, and display IPsec violations.

Steps

At your storage system command line, enter the following command: priv set advanced
For more information about advanced privilege level, see the na_priv(1) man page.
Enter the following command:ipsec stats [-z]
-z resets the statistics counter.
When you are finished viewing statistics, be sure to return to the normal administrative privilege level by entering the following command: priv set admin

Example

The following example shows the statistics provided by the ipsec stats command in priv set advanced mode.

system1*> ipsec stats 
ipsec:
148460138 inbound packets processed successfully 
0 inbound packets violated process security policy 
983 inbound packets with no SA available 
0 invalid inbound packets 
0 inbound packets failed due to insufficient memory 
0 inbound packets failed getting SPI 
0 inbound packets failed on AH replay check 
0 inbound packets failed on ESP replay check 
143929988 inbound packets considered authentic 
0 inbound packets failed on authentication ESP input packets 
des : 3886739 
3des : 140043249 
AH input packets 
md5 : 4530150 
134002232 outbound packets processed successfully 
0 outbound packets violated process security policy 
0 outbound packets with no SP available 
11 outbound packets with no SA available 
0 invalid outbound packets 
0 outbound packets failed due to insufficient memory 
0 outbound packets with no route 
ESP output packets 
des : 4571170 
3des : 124667606 
AH output packets 
md5 : 4763456 
ike: 
IKE input packets 
Identity Protection : 107 
Informational :3682 
Quick : 7310 
IKE output packets 
Identity Protection : 108 
Informational : 10 
Quick : 3663