display packet-filter statistics

Use display packet-filter statistics to display match statistics of ACLs for packet filtering.

Syntax

display packet-filter statistics interface interface-type interface-number { inbound | outbound } [ [ ipv6 ] { acl-number | name acl-name } ] [ brief ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Displays the statistics of an interface specified by its type and number.

inbound: Displays the statistics in the inbound direction.

outbound: Displays the statistics in the outbound direction.

ipv6: Specifies IPv6 ACLs.

acl-number: Specifies an ACL by its number.

name acl-name: Specifies an ACL by its name. The acl-name argument is a case-insensitive string of 1 to 63 characters. It must start with an English letter.

brief: Displays brief statistics.

Usage guidelines

If neither acl-number nor name acl-name is specified, this command displays match statistics of all ACLs for packet filtering.

Examples

# Display match statistics of all ACLs for inbound packet filtering on GigabitEthernet 1/0/1.

<Sysname> display packet-filter statistics interface gigabitethernet 1/0/1 inbound
Interface: GigabitEthernet1/0/1 
 In-bound policy:
  ACL 2001, Hardware-count
   From 2011-06-04 10:25:21 to 2011-06-04 10:35:57
   rule 0 permit source 2.2.2.2 0
   rule 5 permit source 1.1.1.1 0
   Totally 0 packets permitted, 0 packets denied
   Totally 0% permitted, 0% denied

  IPv4 default action: Deny

Table 3: Command output

Field

Description

Interface

Interface to which the ACL applies.

In-bound policy

ACL used for filtering incoming traffic.

Out-bound policy

ACL used for filtering outgoing traffic.

ACL 2001

IPv4 basic ACL 2001 has been successfully applied.

Hardware-count

Successfully enables counting ACL rule matches.

From 2011-06-04 10:25:21 to 2011-06-04 10:35:57

Start time and end time of the statistics.

Totally 0 packets permitted, 0 packets denied

Number of packets permitted and denied by the ACL.

Totally 0% permitted, 0% denied

Ratios of permitted and denied packets to all packets.

IPv4 default action

Packet filter default action for packets that do not match any IPv4 ACLs. This field is displayed only when the default action is deny.

IPv6 default action

Packet filter default action for packets that do not match any IPv6 ACLs. This field is displayed only when the default action is deny.

MAC default action

Packet filter default action for packets that do not match any Ethernet frame header ACLs. This field is displayed only when the default action is deny.

Related commands

reset packet-filter statistics