OTEL Statistics¶
The CNFs OpenTelemetry (OTEL) collector sends the following statistics:
BDoS DNS parser statistics
| Metric | Description |
|---|---|
| err_bounds | The number of DNS packets with invalid bounds |
| err_dns_header | The number of DNS packets with invalid header |
| err_dns_invalid_packet_size | The number of DNS packets with invalid packet size |
| err_dns_qclass_qtype_missing | The number of DNS packets with missing QCLASS and QTYPE fields |
| err_dns_qdcount_zero | The number of DNS packets with zero value for QDCOUNT field |
| err_dns_udp_frag_no_l4 | The number of fragmented DNS packets with no UDP header |
| err_dns_udp_incomplete_first_ip_frag | The number of fragmented DNS packets with no UDP header |
| err_first_qname_compressed | The number of DNS packets with incomplete first fragment (i.e., DNS header and first QD entry) |
| err_max_qname_len_excd | The number of DNS packets that exceed maximum domain name length of 255 octets |
| err_min_udp_dns_size | The number of DNS packets that do not have minimum header size |
| err_non_dns_udp | The number of DNS packets that are not UDP |
| success | The number of DNS packets that are valid |
Ingress controller statistics
| Metric | Description |
|---|---|
| system.cpu.time | The number of seconds each logical CPU spent on each mode (idle, interrupt, nice, softirq, steal, system, user, wait) |
| system.disk.io | Disk bytes transferred |
| system.disk.io_time | Time disk spent activated |
| system.disk.merged | The number of disk reads/writes merged into single physical disk access operations |
| system.disk.operation_time | Time spent in disk operations |
| system.disk.operations | Disk operations count |
| system.disk.pending_operations | The queue size of pending I/O operations |
| system.disk.weighted_io_time | Time disk spent activated multiplied by the queue length |
| system.memory.usage | The number of bytes of memory in use by type (buffered, cached, inactive, free, slab_reclaimable, slab_unreclaimable, used) |
DNS cache resolver statistics
| Metric | Description |
|---|---|
| async | The number of asynchronous responses |
| cb_ctx_cnt | The number of callback context entries |
| failure_cf | Connection failures |
| failure_resolv | Internal resolution failures |
| failure_send | Response send failures |
| failure_server | Server failures |
| fwd_queries | The number of queries requested of the cache that were forwarded |
| fwd_responses | The number of responses answered by the cache via a forwarder |
| key_bytes_allocated | The memory allocated to all entries in DNSSEC key cache |
| key_evictions | The number of DNSSEC key cache evictions |
| key_evictions_mempressure | The number of DNSSEC key cache evictions during aggressive memory pressure |
| key_evictions_rate | The number of DNSSEC key cache evictions per second |
| key_hits | The number of DNSSEC key cache hits |
| key_inserts | The number of DNSSEC key cache inserts |
| key_misses | The number of DNSSEC key cache misses |
| key_modifications_rate | The number of DNSSEC key cache inserts and updates per second |
| key_updates | The number of DNSSEC key cache updates |
| local_drops | The number of packets dropped |
| local_queries | The total number of queries |
| local_responses | The total number of responses |
| mesh_client_wait_response | The number of client queries waiting to respond |
| mesh_detached_states | The number of detached internal opportunistic queries |
| mesh_dns64nodata | The number of NODATA responses to DNS64 queries |
| mesh_dns64reqs | The number of queries sent for DNS64 |
| mesh_dns64xlated | The number of responses where DNS64 AAAA prefix was used to change A records |
| mesh_forever_states | The number of reply states in the forever list |
| mesh_hits | The number of client queries with no nameserver queries |
| mesh_misses | The number of client queries with at least one nameserver query |
| mesh_num_reply_states | The number of mesh states that have replies |
| mesh_prefetch_queries | The number of prefetch queries |
| mesh_queries_rate | Queries per second |
| mesh_replies_sent | The number of replies sent |
| mesh_responses | The number of responses answered by resolver |
| mesh_serve_expired_answers | The number of serve expired answers |
| mesh_stats_dropped | The number of queries dropped without sending |
| mesh_stats_jostled | The number of queries dropped due to no space after sent |
| mesh_tcp_queries | The number of queries sent to nameservers over TCP |
| mesh_tcp_wait_send | The number of queries waiting to be sent over TCP |
| mesh_total_callbacks | The number of times a response or timeout was handled |
| mesh_udp_queries | The number of queries sent to nameservers over UDP |
| mesh_udp_wait_send | The number of queries waiting to be sent over UDP |
| mesh_unwanted_replies | The number of replies with no query |
| mesh_wait_response | The number of queries waiting for response |
| msg_bytes_allocated | The memory allocated to all entries in complete message cache |
| msg_evictions | The number of complete message cache evictions |
| msg_evictions_mempressure | The number of complete message cache evictions during aggressive memory pressure |
| msg_evictions_rate | The number of complete message cache evictions per second |
| msg_hits | The number of complete message cache hits |
| msg_inserts | The number of complete message cache inserts |
| msg_misses | The number of complete message cache misses |
| msg_modifications_rate | The number of complete message cache inserts and updates per second |
| msg_updates | The number of complete message cache updates |
| nameserver_bytes_allocated | The memory allocated to all entries in internet name-server cache |
| nameserver_evictions | The number of internet name-server evictions |
| nameserver_evictions_mempressure | The number of internet name-server cache evictions during aggressive memory pressure |
| nameserver_evictions_rate | The number of internet name-server cache evictions per second |
| nameserver_hits | The number of internet name-server cache hits |
| nameserver_inserts | The number of internet name-server cache inserts |
| nameserver_misses | The number of internet name-server cache misses |
| nameserver_modifications_rate | The number of internet name-server cache inserts and updates per second |
| nameserver_updates | The number of internet name-server cache updates |
| ns_resp_err_formerr | The number of internet name-server cache responses that have FORMERR error code |
| ns_resp_err_memory | The number of internet name-server cache responses that have out of memory error |
| ns_resp_err_other | The number of internet name-server cache responses that have other errors |
| ns_resp_err_port_v4 | The number of internet name-server cache responses that have error due to unavailable port to send IPv4 query |
| ns_resp_err_port_v6 | The number of internet name-server cache responses that have error due to unavailable port to send IPv6 query |
| ns_resp_err_route_v4 | The number of internet name-server cache responses that have error due to unavailable route to send IPv4 query |
| ns_resp_err_route_v6 | The number of internet name-server cache responses that have error due to unavailable route to send IPv6 query |
| ns_resp_err_servfail | The number of internet name-server cache responses that have SERVFAIL error code |
| ns_resp_err_timeout | The number of internet name-server cache responses that have timeout error |
| queries | The number of queries requested of the cache |
| response_time_async | The average time taken (EMA) for asynchronous responses, in microseconds |
| response_time_sync | The average time taken (EMA) for synchronous responses, in microseconds |
| responses | The number of responses answered by the cache |
| responses_rate | The number of responses answered by the cache per second |
| rpz_rewrites | The number of queries rewritten due to response policy |
| rrset_bytes_allocated | The memory allocated to all entries in resource record set cache |
| rrset_evictions | The number of resource record set cache evictions |
| rrset_evictions_mempressure | The number of resource record set cache evictions during aggressive memory pressure |
| rrset_evictions_rate | The number of resource record set cache evictions per second |
| rrset_hits | The number of resource record set cache hits |
| rrset_inserts | The number of resource record set cache inserts |
| rrset_misses | The number of resource record set cache misses |
| rrset_modifications_rate | The number of resource record set cache inserts and updates per second |
| rrset_updates | The number of resource record set cache updates |
| sec_bogus | DNSSEC responses with bogus security status |
| sec_indeterminate | DNSSEC responses with indeterminate security status |
| sec_insecure | DNSSEC responses with insecure security status |
| sec_secure | DNSSEC responses with secure security status |
| sec_unchecked | DNSSEC responses with unchecked security status |
| sync | The number of synchronous responses |
| tcp_bytes_in | TCP bytes received for resolution |
| tcp_bytes_out | TCP bytes sent for resolution |
| tcp_cur_conns | Current TCP connections for resolution |
| tcp_max_conns | Maximum concurrent TCP connections for resolution |
| tcp_pkts_in | TCP packets received for resolution |
| tcp_pkts_out | TCP packets sent for resolution |
| tcp_tot_conns | The number of TCP connections for resolution |
| udp_bytes_in | UDP bytes received for resolution |
| udp_bytes_out | UDP bytes sent for resolution |
| udp_cur_conns | Current UDP connections for resolution |
| udp_max_conns | Maximum UDP connections for resolution |
| udp_pkts_in | UDP packets received for resolution |
| udp_pkts_out | UDP packets sent for resolution |
| udp_tot_conns | The number of UDP connections for resolution |
DNS resolver summary statistics
| Metric | Description |
|---|---|
| client_max_wait_response | The maximum number of client queries waiting for response |
| responses_1day | The response rate per day |
| responses_1hr | The response rate per hour |
| responses_5min | The response rate per 5 minutes |
| server_max_wait_response | The maximum number of queries to nameservers waiting for response |
| tcp_sys_max_conns | The maximum number of connections for TCP queries to nameservers |
| udp_sys_max_conns | The maximum number of connections for UDP queries to nameservers |
DNS resolver statistics
| Metric | Description |
|---|---|
| async | The number of asynchronous responses |
| cb_ctx_cnt | The number of callback context entries |
| failure_cf | Connection failures |
| failure_resolv | Internal resolution failures |
| failure_send | Response send failures |
| failure_server | Server failures |
| fwd.queries | The number of queries requested of the cache that were forwarded |
| fwd.responses | The number of responses answered by the cache via a forwarder |
| key.bytes_allocated | The memory allocated to all entries in DNSSEC key cache |
| key.evictions | The number of DNSSEC key cache evictions |
| key.evictions_mempressure | The number of DNSSEC key cache evictions during aggressive memory pressure |
| key.evictions_rate | The number of DNSSEC key cache evictions per second |
| key.hits | The number of DNSSEC key cache hits |
| key.inserts | The number of DNSSEC key cache inserts |
| key.misses | The number of DNSSEC key cache misses |
| key.modifications_rate | The number of DNSSEC key cache inserts and updates per second |
| key.updates | The number of DNSSEC key cache updates |
| local.drops | The number of packets dropped |
| local.queries | The total number of queries |
| local.responses | The total number of responses |
| mesh.client_wait_response | The number of client queries waiting to respond |
| mesh.detached_states | The number of detached internal opportunistic queries |
| mesh.dns64nodata | The number of NODATA responses to DNS64 queries |
| mesh.dns64reqs | The number of queries sent for DNS64 |
| mesh.dns64xlated | The number of responses where DNS64 AAAA prefix was used to change A records |
| mesh.forever_states | The number of reply states in the forever list |
| mesh.hits | The number of client queries with no nameserver queries |
| mesh.misses | The number of client queries with at least one nameserver query |
| mesh.num_reply_states | The number of mesh states that have replies |
| mesh.prefetch_queries | The number of prefetch queries |
| mesh.queries_rate | Queries per second |
| mesh.replies_sent | The number of replies sent |
| mesh.responses | The number of responses answered by resolver |
| mesh.serve_expired_answers | The number of serve expired answers |
| mesh.stats_dropped | The number of queries dropped without sending |
| mesh.stats_jostled | The number of queries dropped due to no space after sent |
| mesh.tcp_queries | The number of queries sent to nameservers over TCP |
| mesh.tcp_wait_send | The number of queries waiting to be sent over TCP |
| mesh.total_callbacks | The number of times a response or timeout was handled |
| mesh.udp_queries | The number of queries sent to nameservers over UDP |
| mesh.udp_wait_send | The number of queries waiting to be sent over UDP |
| mesh.unwanted_replies | The number of replies with no query |
| mesh.wait_response | The number of queries waiting for response |
| msg.bytes_allocated | The memory allocated to all entries in complete message cache |
| msg.evictions | The number of complete message cache evictions |
| msg.evictions_mempressure | The number of complete message cache evictions during aggressive memory pressure |
| msg.evictions_rate | The number of complete message cache evictions per second |
| msg.hits | The number of complete message cache hits |
| msg.inserts | The number of complete message cache inserts |
| msg.misses | The number of complete message cache misses |
| msg.modifications_rate | The number of complete message cache inserts and updates per second |
| msg.updates | The number of complete message cache updates |
| nameserver.bytes_allocated | The memory allocated to all entries in internet name-server cache |
| nameserver.evictions | The number of internet name-server evictions |
| nameserver.evictions_mempressure | The number of internet name-server cache evictions during aggressive memory pressure |
| nameserver.evictions_rate | The number of internet name-server cache evictions per second |
| nameserver.hits | The number of internet name-server cache hits |
| nameserver.inserts | The number of internet name-server cache inserts |
| nameserver.misses | The number of internet name-server cache misses |
| nameserver.modifications_rate | The number of internet name-server cache inserts and updates per second |
| nameserver.updates | The number of internet name-server cache updates |
| ns_resp_err.formerr | The number of internet name-server cache responses that have FORMERR error code |
| ns_resp_err.memory | The number of internet name-server cache responses that have out of memory error |
| ns_resp_err.other | The number of internet name-server cache responses that have other errors |
| ns_resp_err.port_v4 | The number of internet name-server cache responses that have error due to unavailable port to send IPv4 query |
| ns_resp_err.port_v6` | The number of internet name-server cache responses that have error due to unavailable port to send IPv6 query |
| ns_resp_err.route_v4 | The number of internet name-server cache responses that have error due to unavailable route to send IPv4 query |
| ns_resp_err.route_v6 | The number of internet name-server cache responses that have error due to unavailable route to send IPv6 query |
| ns_resp_err.servfail | The number of internet name-server cache responses that have SERVFAIL error code |
| ns_resp_err.timeout | The number of internet name-server cache responses that have timeout error |
| queries | The number of queries requested of the cache |
| response_time_async | The average time taken (EMA) for asynchronous responses, in microseconds |
| response_time_sync | The average time taken (EMA) for synchronous responses, in microseconds |
| responses | The number of responses answered by the cache |
| responses_rate | The number of responses answered by the cache per second |
| rpz_rewrites | The number of queries rewritten due to response policy |
| rrset.bytes_allocated | The memory allocated to all entries in resource record set cache |
| rrset.evictions | The number of resource record set cache evictions |
| rrset.evictions_mempressure | The number of resource record set cache evictions during aggressive memory pressure |
| rrset.evictions_rate | The number of resource record set cache evictions per second |
| rrset.hits | The number of resource record set cache hits |
| rrset.inserts | The number of resource record set cache inserts |
| rrset.misses | The number of resource record set cache misses |
| rrset.modifications_rate | The number of resource record set cache inserts and updates per second |
| rrset.updates | The number of resource record set cache updates |
| sec_bogus | DNSSEC responses with bogus security status |
| sec_indeterminate | DNSSEC responses with indeterminate security status |
| sec_insecure | DNSSEC responses with insecure security status |
| sec_secure | DNSSEC responses with secure security status |
| sec_unchecked | DNSSEC responses with unchecked security status |
| sync | The number of synchronous responses |
| tcp.bytes_in | TCP bytes received for resolution |
| tcp.bytes_out | TCP bytes sent for resolution |
| tcp.cur_conns | Current TCP connections for resolution |
| tcp.max_conns | Maximum concurrent TCP connections for resolution |
| tcp.pkts_in | TCP packets received for resolution |
| tcp.pkts_out | TCP packets sent for resolution |
| tcp.tot_conns | The number of TCP connections for resolution |
| udp.bytes_in | UDP bytes received for resolution |
| udp.bytes_out | UDP bytes sent for resolution |
| udp.cur_conns | Current UDP connections for resolution |
| udp.max_conns | Maximum UDP connections for resolution |
| udp.pkts_in | UDP packets received for resolution |
| udp.pkts_out | UDP packets sent for resolution |
| udp.tot_conns | The number of UDP connections for resolution |
DNS service statistics
| Metric | Description |
|---|---|
| backlogs | The number of DNS requests waiting to be processed |
| delay_depth | The depth of the delay queue |
| drops | Number of DNS queries dropped |
| fails | The number of responses whose return code is SERVFAIL |
| referrals | The number of referral responses |
| refused | The number of REFUSED responses returned |
| reqs_a | The number of A type DNS packets received |
| reqs_aaaa | The number of AAAA type DNS packets received |
| reqs_ns | The number of NS type DNS packets received |
| reqs_other | The number of all types of DNS packets received that do not fall into any of the specific categories |
| reqs_soa | The number of SOA type DNS packets received |
| requests | The number of DNS requests |
| responses | The number of DNS responses |
| truncs | The number of DNS responses with truncation flag set |
DoS DNS NX domain table statistics
| Metric | Description |
|---|---|
| nxdomaintable_entries | The number of NXDOMAIN table entries |
| nxdomaintable_lookup | The number of NXDOMAIN table lookups |
| nxdomaintable_lookupsuccess | The number of NXDOMAIN table lookups that succeeded |
DoS statistics
| Metric | Description |
|---|---|
| agg_detected | Aggregate attack detected? |
| attack_count | The number of attacks detected |
| attack_detected | A flag representing whether or not an attack is currently occurring |
| ba_detected | Bad actor attack detected? |
| ba_drops | The number of packets dropped due to bad actor attack |
| ba_drops_1h | The number of packets dropped due to bad actor attack in the last one hour |
| ba_drops_1m | The number of packets dropped due to bad actor attack in the last one minute |
| ba_drops_rate | The number of packets dropped due to bad actor attack in the last second |
| ba_stats | The number of bad actor attacks |
| ba_stats_rate | The number of bad actor attacks in the last second |
| bd_detected | Bad destination attack detected? |
| bd_drops | The number of packets dropped due to bad destination attack |
| bd_drops_1h | The number of packets dropped due to bad destination attack in the last one hour |
| bd_drops_1m | The number of packets dropped due to bad destination attack in the last one minute |
| bd_drops_rate | The number of packets dropped due to bad destination attack in the last second |
| bd_stats | The number of bad destination attacks |
| bd_stats_rate | The number of bad destination attacks in the last second |
| bypass_count | The number of packets bypassed |
| bytes | The number of bytes processed |
| bytes_rate | The number of bytes processed in the last second |
| detection | The DoS auto-detection threshold |
| detection_ba | The bad actor auto-detection threshold |
| detection_bd | The bad destination auto-detection threshold |
| dropped_bytes | The number of bytes dropped |
| dropped_bytes_rate | The number of bytes dropped in the last second |
| drops | The number of DoS packets dropped |
| drops_1h | The number of DoS packets dropped in the last hour |
| drops_1m | The number of DoS packets dropped in the last minute |
| drops_rate | The number of DoS packets dropped in the last second |
| mitigation_ba | The auto mitigation threshold for bad actor |
| mitigation_ba_high | The high mitigation threshold for bad actor |
| mitigation_ba_low | The low mitigation threshold for bad actor |
| mitigation_bd | The auto mitigation threshold for bad destination |
| mitigation_bd_high | The high mitigation threshold for bad destination |
| mitigation_bd_low | The low mitigation threshold for bad destination |
| mitigation_curr | The current mitigation threshold |
| mitigation_high | The high mitigation threshold |
| mitigation_low | The low mitigation threshold |
| most_recent_agg_applied_time | The most recent aggregate attack blocked time |
| most_recent_applied_time | The most recent attack blocked time |
| most_recent_ba_applied_time | The most recent bad actor attack blocked time |
| most_recent_bd_applied_time | The most recent bad destination attack blocked time |
| signature_accuracy | The attack signature accuracy |
| stats | The number of DoS packets received |
| stats_1h | The number of DoS packets received in the last hour |
| stats_1h_samples | The number of packets received in the last hour |
| stats_1m | The number of DoS packets received in the last minute |
| stats_rate | The number of DoS packets received in the last second |
| wl_count | The number of DoS whitelist hits |
Firewall rule compilation result statistics
| Metric | Description |
|---|---|
| activation_time | The time at which the firewall container was activated in the TMM |
| commit_duration | The time taken for the commit phase of compilation |
| commit_time | The time at which the commit phase of compilation started |
| container_size_kb | The size of the firewall rule container in kilobytes |
| insert_duration | The time taken to insert rules into the firewall rule container |
| overlap_check_duration | The time taken to perform overlapping check for the firewall rule container |
| process_mem_kb | The amount of memory used during compilation of the firewall rule container |
| remove_duration | The time taken to remove rules from the firewall rule container |
| rule_count | The number of rules in the firewall rule container |
| start_time | The time at which the firewall rule container compilation started |
| total_compile_time | The total time taken for firewall rule compilation |
Firewall context statistics
| Metric | Description |
|---|---|
| packets_accept | The number of packets accepted |
| packets_accept_decisively | The number of packets accepted decisively |
| packets_drop | The number of packets accepted dropped |
| packets_reject | The number of packets accepted rejected |
Firewall rule compilation’s current state statistics
| Metric | Description |
|---|---|
| blob_creation_time | The blob creation time |
| compilation_end_time | The time at which the firewall rule compilation ended |
| compilation_start_time | The time at which the firewall rule compilation began |
| rule_deploy_end_time | The time at which the firewall rule deployment ended |
| rule_deploy_start_time | The time at which the firewall rule deployment began |
| urule_count | The number of micro-rules |
Firewall event log throttling statistics
| Metric | Description |
|---|---|
| cum_dropped | The cumulative count of events dropped by the logger |
| cum_msgs | The cumulative count of events logged by the logger |
| dropped | The number of events dropped by the logger |
| msgs | The number of events logged by the logger |
CGNAT pool statistics
| Metric | Description |
|---|---|
| active_end_points | The number of active endpoints |
| active_hairpin_connections | The number of active hairpin connections |
| active_translations | The number of active translations |
| backup_pool_translations | The number of NAT translations from the backup pool |
| dnat_num_excl_addrs | The number of entries in exclude address table for DNAT |
| end_points | The integer product of the number of IP addresses and the translation port range |
| end_points_high_value | The double product of the number of IP addresses and the translation port range |
| hairpin_connection_failures | The number of failed hairpin connections |
| hairpin_connection_requests | The number of hairpin connection requests |
| persistence_mapping_failures | The number of persistence mapping translation request failures |
| translation_ip_attempts | The number of IPs attempted for translation |
| translation_port_attempts | The number of ports attempted for translation |
| translation_request_failures | The number of translation request failures |
| translation_requests | The number of translation requests |
NAT rule statistics
| Metric | Description |
|---|---|
| counter | The number of times this NAT rule has been hit |
| last_hit_time | The last time this NAT rule has been hit |
| micro_rules | The number of micro-rules |
NAT translation statistics
| Metric | Description |
|---|---|
| bidirectional_request_failures | The number of bidirectional request failures |
| bidirectional_requests | The number of bidirectional requests |
| err_address_translation | The number of err address translation events |
| err_config_mismatch | The number of err config mismatch events |
| err_flow_collision | The number of err flow collision events |
| err_memory | The number of err memory events |
| err_port_translation | The number of err port translation events |
| subscriber_id_errors | The number of subscriber id errors |
| subscriber_id_lookups | The number of subscriber id lookups |
| subscriber_id_not_found | The number of subscriber id not found events |
| translation_request_failures | The number of translation request failures |
| translation_requests | The number of translation requests |
Firewall rule statistics
| Metric | Description |
|---|---|
| counter | The number of packets matching this rule |
| last_hit_time | The last time a packet matched this rule |
| micro_rules | The number of micro-rules |
L3 interface statistics
| Metric | Description |
|---|---|
| hc_in_broadcast_pkts | The number of incoming broadcast packets |
| hc_in_multicast_pkts | The number of incoming multicast packets |
| hc_in_octets | The number of incoming octets |
| hc_in_ucast_pkts | The number of incoming unicast packets |
| hc_out_broadcast_pkts | The number of outgoing broadcast packets |
| hc_out_multicast_pkts | The number of outgoing multicast packets |
| hc_out_octets | The number of outgoing octets |
| hc_out_ucast_pkts | The number of outgoing unicast packets |
| in_discards | The number of incoming packets discarded |
| in_errors | The number of incoming error packets |
| in_unknown_protos | The number of incoming unknown proto packets |
| out_discards | The number of outgoing packets discarded |
| out_errors | The number of outgoing error packets |
| syncookie_tmm_cnt | The number of SYN cookies |
Device interface statistics
| Metric | Description |
|---|---|
| counters.bytes_in | The number of bytes received on the specified interface |
| counters.bytes_out | The number of bytes transmitted out of the specified interface |
| counters.collisions | The number of collisions on the specified interface, incremented by the number of collisions experienced during transmissions of a frame |
| counters.drops_in | The number of packets dropped on ingress for various reasons on the specified interface |
| counters.drops_out | The number of packets aged out or with excessive transmission delays due to multiple deferrals on the specified interface |
| counters.errors_in | The number of received packets that are either undersized, oversized, or have FCS errors by the specified interface |
| counters.errors_out | The number of excessive collisions, incremented for each frame that experienced 16 collisions during transmission and was aborted on the specified interface |
| counters.pkts_in | The number of packets received on this interface |
| counters.pkts_out | The number of packets transmitted out of the specified interface |
| rx_pkts | The number of packets received on this interface |
| tx_lost_carrier | The number of times that the carrier sense condition was lost or never asserted when attempting to transmit a frame on a particular interface |
| tx_pkts | The number of packets transmitted out of the specified interface |
CGNAT cumulative statistics
| Metric | Description |
|---|---|
| active_inbound_reservations | The number of active inbound reservations |
| active_persistence_mappings | The number of active persistence mappings |
| biglsn_fail_early_accepts | The number of inbound entries found in the session DB |
| biglsn_fail_early_rejects | The number of inbound entries not found in the session DB |
| biglsn_inbound_entry_not_found | The number of inbound entries not found in the session DB |
| end_points | The number of endpoints available in the global LSN pool |
TMM page memory statistics
| Metric | Description |
|---|---|
| pages_used | The count of used memory pages within the TMM |
| pages_avail | The count of available memory pages allocated for the TMM |
Pool member statistics
| Metric | Description |
|---|---|
| connq.age_edm | The exponential decaying maximum queue entry age in milliseconds |
| connq.age_ema | The exponential moving average queue entry age in milliseconds |
| connq.age_head | The age in milliseconds of the oldest queue entry |
| connq.age_max | The maximum queue entry age in milliseconds |
| connq.depth | The number of connections currently in queue |
| connq.serviced | The number of entries that have been removed from the queue |
| cur_sessions | The number of current sessions going through the specified pool member |
| msg.msg_in | The number of incoming routed messages to the specified pool member |
| msg.msg_out | The number of outgoing routed messages to the specified pool member |
| msg.req_in | The number of routed message incoming requests to the specified pool member |
| msg.req_out | The number of routed message outgoing requests to the specified pool member |
| msg.resp_in | The number of routed message incoming responses to the specified pool member |
| msg.resp_out | The number of routed message outgoing responses to the specified pool member |
| serverside.bytes_in | The number of bytes received by the specified pool member from server-side |
| serverside.bytes_out | The number of bytes sent to server-side from the specified pool member |
| serverside.cur_conns | The number of current connections from server-side to the specified pool member |
| serverside.cur_load | The current load from server-side on the specified pool member |
| serverside.max_conns | The maximum number of connections from server-side to the specified pool member |
| serverside.pkts_in | The number of packets received by the specified pool member from server-side |
| serverside.pkts_out | The number of packets sent to server-side from the specified pool member |
| serverside.tot_conns | The number of connections from server-side to the specified pool member |
| tot_requests | The number of requests going through the specified pool member |
DNS profile statistics
| Metric | Description |
|---|---|
| a_reqs | The number of A query packets received |
| aaaa_reqs | The number of AAAA query packets received |
| any_reqs | The number of ANY type query packets received |
| cname_reqs | The number of CNAME query packets received |
| dns64fails | The number of unsuccessful AAAA requests |
| dns64reqs | The number of A requests the system generated and sent |
| dns64trans | The number of A responses translated to AAAA |
| drops | The number of packets dropped |
| edns0_cc_inserted | The number of EDNS0 cache control insertions |
| edns0_cc_responses | The number of EDNS0 cache control responses |
| edns0_cs_inserted | The number of EDNS0 client subnet insertions |
| edns0_cs_queries | The number of EDNS0 client subnet queries |
| edns0_cs_responses | The number of EDNS0 client subnet responses |
| fast_dns_allowed | The number of non-matched queries passing through DNS Rapid Response |
| fast_dns_drops | The number of non-matching queries dropped by DNS Rapid Response |
| fast_dns_queries | The number of queries handled by DNS Rapid Response |
| fast_dns_resp_bvers | The number of queries resulting in a BADVERS response by DNS Rapid Response |
| fast_dns_resp_ne | The number of non-matching queries resulting in a No-Data response by DNS Rapid Response |
| fast_dns_resp_nx | The number of non-matching queries resulting in a NXDOMAIN response by DNS Rapid Response |
| fast_dns_resp_rf | The number of non-matching queries resulting in a REFUSED response by DNS Rapid Response |
| fast_dns_resp_tc | The number of non-matching queries resulting in a truncated response by DNS Rapid Response |
| fast_dns_responses | The number of responses returned by DNS Rapid Response |
| gtm_rewrites | The number of responses modified by GTM |
| hdr_aa | The number of responses with AA bit set |
| hdr_ad | The number of responses with AD bit set |
| hdr_cd | The number of queries with CD bit set |
| hdr_edns0 | The number of queries with EDNS0 bit set |
| hdr_ra | The number of responses with RA bit set |
| hdr_rd | The number of queries with RD bit set |
| hdr_tc | The number of responses with TC bit set |
| hints | The number of hint (Root Nameservers) responses sent |
| lic_dns_rate_rejects | The number of DNS queries rejected due to rate limiter action |
| malformed | The number of malformed packets received |
| malicious | The number of malicious packets received |
| mx_reqs | The number of MX query packets received |
| naptr_reqs | The number of NAPTR query packets received |
| noerrors | The number of NOERROR responses sent |
| ns_reqs | The number of NS query packets received |
| nxdomain_override | The number of responses whose return code is NOERROR due to NXDOMAIN override |
| op_notify | The number of queries whose operation code is NOTIFY |
| op_other | The number of queries whose operation code is uncategorized |
| op_query | The number of queries whose operation code is QUERY |
| op_update | The number of queries whose operation code is UPDATE |
| other_reqs | The number of uncategorized DNS packets received |
| ptr_reqs | The number of PTR query packets received |
| queries | The number of DNS queries |
| r_badvers | The number of responses whose return code is BADVERS |
| r_noerror | The number of responses whose return code is NOERROR |
| r_nxdomain | The number of responses whose return code is NXDOMAIN |
| r_refused | The number of responses whose return code is REFUSED |
| r_servfail | The number of responses whose return code is SERVFAIL |
| rejects | The number of reject (REFUSED) responses sent |
| responses | The number of DNS responses |
| rps | The average number of DNS responses per second |
| soa_reqs | The number of SOA query packets received |
| srv_reqs | The number of SRV query packets received |
| suspends | The number of TCL suspends |
| tocache | The number of requests sent to the DNS cache |
| todns | The number of requests sent to backend DNS |
| todnsx | The number of requests sent to DNS Express |
| togtm | The number of requests sent to GTM |
| tozxfrd | The number of DNS Express notifies |
| txt_reqs | The number of TXT query packets received |
| zone_axfr | The number of queries whose question type is AXFR |
| zone_ixfr | The number of queries whose question type is IXFR |
FTP profile statistics
| Metric | Description |
|---|---|
| active_requests | The number of active transfer requests received |
| download_requests | The number of download requests received |
| ftps_bypasses | The number of FTP transitions to pass through mode due to SSL bypass |
| ftps_intercepts | The number of intercepted FTPS connections |
| ftps_resets | The number of reset FTP connections due to FTPS policy |
| ftps_sessions | The number of sessions entering explicit FTPS mode |
| login_requests | The number of login requests received |
| passive_requests | The number of passive transfer requests received |
| passthru_transitions | The number of sessions entering pass through mode |
| upload_requests | The number of upload requests received |
Point-to-Point Tunneling Protocol profile statistics
| Metric | Description |
|---|---|
| common_active_calls | The number of active PPTP calls |
| common_call_clear_requests | The number of PPTP control messages sent by the server to the client indicating that a particular call is to be disconnected |
| common_call_disconnect_notifies | The number of PPTP Call-Disconnect-Notify control messages sent by the client to the server |
| common_echo_replies` | The number of PPTP control messages sent by either peer of a client-server control connection in response to the receipt of an Echo-Request |
| common_echo_requests | The number of PPTP control messages sent by either peer of a client-server control connection |
| common_failed_calls | The number of PPTP calls that failed |
| common_outgoing_call_replies | The number of PPTP control messages sent in reply to a received Start-Control-Connection-Request message |
| common_outgoing_call_requests | The number of PPTP control messages sent by the server to the client to indicate that an outbound call from the client is to be established |
| common_set_link_info | The number of PPTP control messages sent by the server to the client to set PPP-negotiated options |
| common_start_replies | The number of PPTP control messages sent in reply to a received Start-Control-Connection-Request message |
| common_start_requests | The number of PPTP control messages used to establish the control connection between a server and a client |
| common_stop_replies | The number of PPTP control messages sent by one peer of a client-server control connection upon receipt of a Stop-Control-Connection-Request from the other peer |
| common_stop_requests | The number of PPTP control messages sent by one peer of a client-server control connection to inform the other peer that the control connection should be closed |
| common_total_calls | The number of PPTP calls served |
| common_wan_error_notifies | The number of WAN-Error-Notify messages sent by the client to the server to indicate WAN error conditions |
Realtime Streaming Protocol profile statistics
| Metric | Description |
|---|---|
| num_errors | The number of RTSP errors |
| num_interleaved_data | The number of interleaved RTSP data packets |
| num_requests | The number of RTSP requests |
| num_responses | The number of RTSP responses |
Service-Based Interface rate limiting statistics
| Metric | Description |
|---|---|
| cur_acceptance_rate | The current percentage of SBI requests forwarded to a server that received a successful response code |
| cur_accepted_responses_per_sec | The current number of SBI requests per second forwarded to a server that received a successful response code |
| cur_bytes_per_sec_egress | The current number of bytes per second egressed by SBI, after any rate limiting was applied |
| cur_bytes_per_sec_ingress | The current number of bytes per second ingressed to SBI, before any rate limiting was applied |
| cur_conns_at_100_pct_threshold_egress | The current number of connections whose egress rate exceeds 100 percent of the configured SBI ratelimit threshold |
| cur_conns_at_100_pct_threshold_ingress | The current number of connections whose ingress rate exceeds 100 percent of the configured SBI ratelimit threshold |
| cur_conns_at_50_pct_threshold_egress | The current number of connections whose egress rate exceeds 50 percent of the configured SBI ratelimit threshold |
| cur_conns_at_50_pct_threshold_ingress | The current number of connections whose ingress rate exceeds 50 percent of the configured SBI ratelimit threshold |
| cur_conns_at_75_pct_threshold_egress | The current number of connections whose egress rate exceeds 75 percent of the configured SBI ratelimit threshold |
| cur_conns_at_75_pct_threshold_ingress | The current number of connections whose ingress rate exceeds 75 percent of the configured SBI ratelimit threshold |
| cur_conns_at_90_pct_threshold_egress | The current number of connections whose egress rate exceeds 90 percent of the configured SBI ratelimit threshold |
| cur_conns_at_90_pct_threshold_ingress | The current number of connections whose ingress rate exceeds 90 percent of the configured SBI ratelimit threshold |
| cur_defer_actions_per_sec_egress | The current number of defer actions being triggered per second by egress SBI rate limiting |
| cur_defer_actions_per_sec_ingress | The current number of defer actions being triggered per second by ingress SBI rate limiting |
| cur_drop_actions_per_sec_egress | The current number of drop actions being triggered per second by egress SBI rate limiting |
| cur_drop_actions_per_sec_ingress | The current number of drop actions being triggered per second by ingress SBI rate limiting |
| cur_msg_per_sec_egress | The current number of messages per second egressed by SBI, after any rate limiting was applied |
| cur_msg_per_sec_ingress | The current number of messages per second ingressed to SBI, before any rate limiting was applied |
| cur_msgs_per_sec_prio_1_egress | The current number of priority 1 messages per second egressed by SBI, after any rate limiting was applied |
| cur_msgs_per_sec_prio_1_ingress | The current number of priority 1 messages per second ingressed to SBI, before any rate limiting was applied |
| cur_msgs_per_sec_prio_2_egress | The current number of priority 2 messages per second egressed by SBI, after any rate limiting was applied |
| cur_msgs_per_sec_prio_2_ingress | The current number of priority 2 messages per second ingressed to SBI, before any rate limiting was applied |
| cur_msgs_per_sec_prio_3_egress | The current number of priority 3 messages per second egressed by SBI, after any rate limiting was applied |
| cur_msgs_per_sec_prio_3_ingress | The current number of priority 3 messages per second ingressed to SBI, before any rate limiting was applied |
| cur_msgs_per_sec_prio_4_egress | The current number of priority 4 messages per second egressed by SBI, after any rate limiting was applied |
| cur_msgs_per_sec_prio_4_ingress | The current number of priority 4 messages per second ingressed to SBI, before any rate limiting was applied |
| cur_none_actions_per_sec_egress | The current number of messages per second for which no action is performed by egress SBI rate limiting |
| cur_none_actions_per_sec_ingress | The current number of messages per second for which no action is performed by ingress SBI rate limiting |
| cur_reject_actions_per_sec_egress | The current number of reject actions being triggered per second by egress SBI rate limiting |
| cur_reject_actions_per_sec_ingress | The current number of reject actions being triggered per second by ingress SBI rate limiting |
Protocol inspection library statistics
| Metric | Description |
|---|---|
| flows_active | The number of active flows being inspected |
| flows_processed | The number of flows inspected |
Protocol inspection statistics
| Metric | Description |
|---|---|
| hit_count | The number of times the inspection was matched |
| last_hit_time | The last time the inspection was matched |
TMM Statistics
| Metric | Description |
|---|---|
| client_side_traffic.bytes_in | The number of bytes received by the system from client-side |
| client_side_traffic.bytes_out | The number of bytes sent to server-side from the system |
| client_side_traffic.cur_conns | The current connections from client-side to the system |
| client_side_traffic.max_conns | The maximum connections from client-side to the system |
| client_side_traffic.pkts_in | The number of packets received by the system from client-side |
| client_side_traffic.pkts_out | The number of packets sent to client-side from the system |
| cpu_usage_15mins | The percentage of time the TMM was busy over the last 15 minutes |
| cpu_usage_15secs | The percentage of time the TMM was busy over the last 15 seconds |
| cpu_usage_1min | The percentage of time the TMM was busy over the last 1 minute |
| cpu_usage_1sec | The percentage of time the TMM was busy over the last 1 second |
| cpu_usage_5mins | The percentage of time the TMM was busy over the last 5 minutes |
| cpu_usage_5secs | The percentage of time the TMM was busy over the last 5 seconds |
| dropped_packets | The number of dropped packets |
| memory_total | The memory available for TMM |
| memory_used | The memory in use for TMM |
| server_side_traffic.bytes_in | The number of bytes received by the system from server-side |
| server_side_traffic.bytes_out | The number of bytes sent to server-side from the system |
| server_side_traffic.cur_conns | The current connections from server-side to the system |
| server_side_traffic.max_conns | The maximum connections from client-side to the system |
| server_side_traffic.pkts_in | The number of packets received by the system from server-side |
| server_side_traffic.pkts_out | The number of packets sent to server-side from the system |
Virtual server statistics
| Metric | Description |
|---|---|
| clientside.bytes_in | The number of bytes received by the specified virtual server from client-side |
| clientside.bytes_out | The number of bytes sent to client-side from the specified virtual server |
| clientside.cur_conns | The current connections from client-side to the specified virtual server |
| clientside.max_conns | The maximum connections from client-side to the specified virtual server |
| clientside.pkts_in | The number of packets received by the specified virtual server from client-side |
| clientside.pkts_out | The number of packets sent to client-side from the specified virtual server |
| clientside.tot_conns | The number of connections from client-side to the specified virtual server |
| msg.req_in | The number of incoming requests routed through the specified virtual server |
| msg.req_out | The number of outgoing requests routed through the specified virtual server |
| msg.resp_in | The number of incoming responses routed through the specified virtual server |
| msg.resp_out | The number of outgoing responses routed through the specified virtual server |
| serverside.bytes_in | The number of bytes received by the specified virtual server from server-side |
| serverside.bytes_out | The number of bytes sent to server-side from the specified virtual server |
| serverside.cur_conns | The current connections from server-side to the specified virtual server |
| serverside.max_conns | The maximum connections from server-side to the specified virtual server |
| serverside.pkts_in | The number of packets received by the specified virtual server from server-side |
| serverside.pkts_out | The number of packets sent to server-side from the specified virtual server |
| serverside.tot_conns | The number of connections from server-side to the specified virtual server |
VLAN member statistics
| Metric | Description |
|---|---|
| clone_pkt_err | The number of packet clone errors |
| clone_pkt_ok | The number of successfully cloned packets |