ipfstat(1M)ipfstat(1M)NAMEipfstat - displays HP-UX IPFilter statistics and filter rules
SYNOPSISDESCRIPTION
examines using the symbols and To operate, it needs to be able to read
both and the kernel itself. The kernel name defaults to
The default behaviour of is to retrieve and display the accumulated
statistics which have been accumulated over time as the kernel has put
packets through the filter.
OPTIONS
Shows the output for IPv6 rules. This option is valid only with the
options and If you do not specify the option, these commands
show the output for IPv4 rules only.
Display the accounting filter list and show bytes counted against each
rule.
Display packet authentication statistics.
Use a device other than
for interfacing with the kernel.
Show fragment state information (statistics) and held state information
(in
the kernel) if any.
Show groups currently configured (both active and inactive).
Show per-rule the number of times it was selected for a packet (the
number
of "hits." Use this option in combination with or
Display the filter list used for the input side of the kernel IP pro‐
cessing.
If you specify this option with the option, it displays the IPv6
rules; if you specify this option without the option, it dis‐
plays the IPv4 rules.
Swap between retrieving "inactive"/"active" filter list details. Use
this option in combination with If you specify this option with
the option, it displays the IPv6 rules; if you specify this
option without the option, it displays the IPv4 rules.
Displays the number and type of limits active and also the limit
logging and memory usage statistics. DCA mode must be enabled
for this option to return valid data. If you specify this option
with the option, it displays the IPv6 rule statistics; if you
specify this option without the option, it displays the IPv4
rule statistics.
With the option, the output is more detailed and includes
the source and destination IP addresses, destination port,
configured and current limit and connection exceeded count.
Show the rule number for each rule as it is printed. The rule
number is printed as
Display the filter list used for the output side of the kernel IP pro‐
cessing.
If you specify this option with the option, it displays the IPv6
rules; if you specify this option without the option, it dis‐
plays the IPv4 rules.
Displays the list of active interfaces that are filtered by IPFilter.
With the option, the output is more detailed.
Displays per rule limit statistics which includes the limit type,
configured and current connection limit and connection
exceeded count. DCA mode should be enabled for this
option to work properly. If you specify this option with the
option, it displays information about the specified rule in the
IPv6 ruleset; if you specify this option without the option, it
displays information about the specified rule in the IPv4 rule‐
set.
Show packet/flow state information (statistics only).
Show held state information (in the kernel) if any (no statistics).
Turn verbose mode on. Displays more debugging information.
SYNOPSIS
The utility displays current kernel statistics gathered as a result of
applying the active ruleset to packets going in and out of the kernel.
This is the default operation when no command line parameters are
present.
When run with either the or options, it will retrieve and display the
inbound or outbound rules in the active ruleset.
FILESSEE ALSOipf(1M), ipfilter(1M)AUTHOR
IPFilter was originally developed by Darren Reed. This HP-UX
enhanced version of IPFilter is based on the open source version
3.5 Alpha 5.
ipfstat(1M)