17-28
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter17 Administrative Tasks for the Sensor
Displaying Statistics
Step 3
Display the list of policies for event action rules.
sensor# list event-action-rules-configurations
Event Action Rules
Instance Size Virtual Sensor
rules0 112 vs0
rules1 141 vs1
sensor#
Step 4
Display the list of policies for signature definition.
sensor# list signature-definition-configurations
Signature Definition
Instance Size Virtual Sensor
sig0 336 vs0
sig1 141 vs1
sig2 141 N/A
sensor#
Displaying Statistics
Use the show statistics [analysis-engine | anomaly-detection | authentication | denied-attackers |
event-server | event-store | external-product-interface | global-correlation | host | logger |
network-access | notification | os-identification | sdee-server | transaction-server | virtual-sensor |
web-server] [clear] command to display statistics for each sensor application.
Use the show statistics {anomaly-detection | denied-attackers | os-identification | virtual-sensor}
[name | clear] command to display statistics for these components for all virtual sensors. If you provide
the virtual sensor name, the statistics for that virtual sensor only are displayed.
Note
The clear option is not available for the analysis engine, anomaly detection, host, network access, or OS
identification applications.
For the IPS 4510 and IPS 4520, at the end of the command output, the re are extra details for the Ethernet
controller statistics, such as the total number of packets received at the Ethernet controller, the total
number of packets dropped at the Ethernet controller under high load conditions, and the total packets
transmitted including the customer traffic packets and the internal keepalive packet count.
Note
The Ethernet controller statistics are polled at an interval of 5 seconds from the hardware side. The
keepalives are sent or updated at an interval of 10 ms. Because of this, there may be a disparity in the
actual count reflected in the total packets transmitted. At times, it is even possible that the total packets
transmitted may be less that the keepalive packets transmitted.
To display statistics for the sensor, follow these steps:
Step 1
Log in to the CLI.
Step 2
Display the statistics for the Analysis Engine.
sensor# show statistics analysis-engine
Analysis Engine Statistics
Number of seconds since service started = 431157
Processing Load Percentage