================================================================================== Current system time is Thu, 5 Mar 2009 21:31:13 =============================================================================== get envar last_reset=2001-03-06 19:53:21 by netscreen .hash-seg=7 (1968404799) =============================================================================== get os Interrupt: 532990/297858650 ID Task Name State Stack Heap/used Scheduled Run Time Lock Latency 1 100ms timer IDLE (Suspend) 8fffff7c/02fc0 30/ 0 2978131 630.413, 0.000 2 1s timer IDLE (Suspend) 8fffff7c/02fc0 30/ 0 297817 5852.137, 0.000 3 10s timer IDLE (Suspend) 8fffff7c/02fc0 30/ 0 29785 4.364, 0.000 4 1s stimer BLOCK (Semaphore) 8fffff68/02fc0 30/ 0 595630 598.026, 0.000 5 10s stimer BLOCK (Mail) 8fffff90/02fc0 30/ 0 29782 8.380, 0.000 6 min stimer BLOCK (Mail) 8fffff90/02fc0 30/ 0 4964 132.170, 0.000 7 idle task RSVD (YIELD) 8fffff94/02fc0 30/ 0 6274270 315.234, 0.000 8 resource BLOCK (Mail) 8fffff5c/02fc0 30/ 0 1 0.000, 0.000 9 File Async Task BLOCK (Mail) 8fffff4c/04fc0 30/ 0 1 0.000, 0.000 10 led IDLE (Suspend) 8fffff7c/08fc0 30/ 0 2977913 192.027, 0.000 11 route IDLE (Suspend) 8fffff7c/18fc0 30/ 0 44 0.006, 0.000 12 nat_hole_ager BLOCK (Semaphore) 8fffff68/02fc0 30/ 0 297815 23.192, 0.000 13 natager BLOCK (Semaphore) 8fffff68/02fc0 30/ 0 446724 1269.444, 0.000 14 session scan IDLE (Suspend) 8fffff74/02fc0 30/ 0 883 8.200, 0.000 15 mcast session scIDLE (Suspend) 8fffff74/02fc0 30/ 0 1 0.000, 0.000 16 link poll IDLE (Suspend) 8fffff7c/08fc0 30/ 0 297824 19.437, 0.000 17 hwif count poll IDLE (Suspend) 8fffff7c/02fc0 30/ 0 18614 1.874, 0.000 18 tcp send IDLE (Suspend) 8ffffdc8/02fc0 30/ 0 287434 34.233, 0.000 19 tcp recv IDLE (Suspend) 8fffff7c/02fc0 30/ 0 78293 13.091, 0.000 20 ping high IDLE (Socket) 8ffffdb4/06fc0 30/ 0 223 0.057, 0.000 21 ping norm IDLE (Socket) 8ffffdb4/06fc0 30/ 0 1992268 326.598, 0.000 22 tftp BLOCK (Mail) 8fffff54/02fc0 30/ 0 1 0.000, 0.000 23 netif IDLE (Sleep) 8fffff68/08fc0 30/ 0 279407 40.233, 0.000 24 pk poll mgt BLOCK (Event) 8fffff80/02fc0 30/ 0 8 0.002, 0.000 25 asp_tcp_timer IDLE (Sleep) 8fffff54/08fc0 30/ 0 595614 47.806, 0.000 26 cmd IDLE (Sleep) 8ffffed0/10fc0 30/ 0 182 0.015, 0.000 27 dialertask IDLE (Sleep) 8fffff44/04fc0 30/ 0 1488844 119.516, 0.000 28 l3ifbackuptask IDLE (Sleep) 8fffff50/04fc0 30/ 0 595629 37.094, 0.000 29 pki IDLE (Socket) 8ffffdbc/0ffc0 30/ 0 9596 66.052, 0.000 30 pki-db BLOCK (Mail) 8ffffeb8/04fc0 30/ 0 1 0.000, 0.000 31 ssl IDLE (Suspend) 8fffff7c/0ffc0 30/ 0 4 0.001, 0.000 32 infranet IDLE (Suspend) 8fffff7c/08fc0 30/ 0 1 0.000, 0.000 33 dhcp probing BLOCK (Mail) 8fffff5c/02fc0 30/ 0 7 0.001, 0.000 34 dnsa IDLE (Suspend) 8ffffe4c/10fc0 30/ 0 1 0.000, 0.000 35 dns IDLE (Suspend) 8fffff7c/10fc0 30/ 0 302779 19.809, 0.000 36 rm IDLE (Sleep) 8fffff6c/04fc0 30/ 0 208471 11.447, 0.000 37 vpnmon_send IDLE (Sleep) 8fffff58/04fc0 30/ 0 297815 22.151, 0.000 38 ppp BLOCK (Mail) 8fffff58/08fc0 30/ 0 1 0.000, 0.000 39 ikmpd IDLE (Suspend) 8fffff5c/18fc0 30/ 16 595629 105.519, 0.000 40 natt_ka BLOCK (Event) 8fffff78/04fc0 30/ 0 595631 35.288, 0.000 41 l2tp mgt IDLE (Suspend) 8fffff7c/10fc0 30/ 0 446722 26.739, 0.000 42 gt_ka IDLE (Sleep) 8fffff68/02fc0 30/ 0 297815 21.560, 0.000 43 arp IDLE (Socket) 8ffffdf0/06fc0 30/ 0 605745 268.926, 0.000 44 nsrp_task IDLE (Suspend) 8fffff7c/04fc0 30/ 0 1 0.000, 0.000 45 resync_task BLOCK (Mail) 8fffff28/04fc0 30/ 0 1 0.000, 0.000 46 count IDLE (Suspend) 8fffff7c/02fc0 30/ 0 5097 0.479, 0.000 47 traffic shaping BLOCK (Semaphore) 8fffff68/02fc0 30/ 0 595630 36.822, 0.000 48 acl_ager IDLE (Suspend) 8fffff7c/04fc0 30/ 0 595629 38.032, 0.000 49 phtaskpri IDLE (Sleep) 8fffff44/07fc0 30/ 0 297815 18.221, 0.000 50 phtasksec IDLE (Sleep) 8fffff44/07fc0 30/ 0 297815 18.320, 0.000 51 phome IDLE (Sleep) 8fffff58/0ffc0 30/ 0 59563 3.797, 0.000 52 ssh IDLE (Socket) 8ffffde4/08fc0 30/ 0 1015141 242.843, 0.000 53 sendmail BLOCK (Mail) 8fffff50/02fc0 30/ 0 1 0.000, 0.000 54 savecfg IDLE (Suspend) 8fffff7c/04fc0 30/ 0 4209 13.471, 0.000 55 hdio IDLE (Suspend) 8fffff7c/02fc0 30/ 0 332560 22.505, 0.000 56 telnet IDLE (Socket) 8ffffd84/04fc0 30/ 1 5958874 1423.954, 0.000 57 http-fx BLOCK (Mail) 8fffff54/07fc0 30/ 0 1 0.000, 0.000 58 web HIGH (Running) 8ffffe14/18fc0 30/ 9 543428 120.130, 0.000 59 vfs IDLE (Suspend) 8fffff80/04fc0 30/ 0 29782 4.444, 0.000 60 icap_server_pollIDLE (Suspend) 8fffff7c/04fc0 30/ 0 59563 3.594, 0.000 61 MDH IDLE (Suspend) 8fffff7c/06fc0 30/ 0 2 0.000, 0.000 62 mgcp BLOCK (Semaphore) 8fffff68/02fc0 30/ 0 297815 24.259, 0.000 63 sip-alg IDLE (Suspend) 8fffff78/06fc0 30/ 0 74454 5.482, 0.000 64 auth IDLE (Socket) 8ffffc90/10fc0 30/ 0 715857 73.572, 0.000 65 aaa task IDLE (Socket) 8ffffdf0/04fc0 30/ 0 1 0.000, 0.000 66 eap task IDLE (Suspend) 8fffff7c/04fc0 30/ 0 1 0.000, 0.000 67 modem IDLE (Sleep) 8fffff6c/04fc0 30/ 0 2977452 243.050, 0.000 68 flash BLOCK (Semaphore) 8fffff78/02fc0 30/ 0 3607 90.729, 0.000 69 EHCI Task IDLE (Sleep) 8fffff5c/02fc0 30/ 0 2977445 225.194, 0.000 70 usb event IDLE (Sleep) 8fffff54/02fc0 30/ 0 2977929 229.660, 0.000 71 wlan_soc IDLE (Sleep) 8fffff6c/02fc0 30/ 0 1191079 107.264, 0.000 72 msg_proc IDLE (Socket) 8ffffd84/08fc0 30/ 0 149123 67.738, 0.000 73 msg_poll IDLE (Sleep) 8fffff64/08fc0 30/ 0 2977448 277.896, 0.000 74 snmp IDLE (Socket) 8ffffdd0/08fc0 30/ 0 1 0.000, 0.000 75 hdasset IDLE (Suspend) 8fffff7c/02fc0 30/ 0 204932 11.175, 0.000 76 ssh-cmd:8 IDLE (Sleep) 8ffffed0/10fc0 30/ 0 206 0.056, 0.000 77 url IDLE (Suspend) 8fffff70/02fc0 30/ 0 297808 18.986, 0.000 78 dlog NORM (Running) 8fffff54/04fc0 30/ 0 374467 29.807, 0.000 Current flow control parameters: Flow rtt threshold: 39 ms Cut flow step: 8 P1 pak quota step: 10 Cur flow rtt: 27 us Flow rtt high: 6253 us Cur intr elap cnt: 200 us Intr cnt high: 10000 us Scheduling policy: High priority ratio: 8 Normal priority ratio: 1024 System up misconds:297858656 Flow packet processing cost misconds:532990 (0 percent cpu) Flow others cost misconds:33748175 (11 percent cpu) Task cost misconds:13602522 (4 percent cpu) System misc cost misconds:249974969 (11 percent cpu) =============================================================================== get memory Kernel Memory: allocated 22215232, left 121151680, frag 94 IPC Memory: allocated 402688, left 3791568, frag 43 DI Memory: allocated 0, left 0, frag 0 Global memory pools: NAME SYS_MEM ALLOCMEM NALLOC NFREE OVERSZ QUOTA ============================================================================== Routing 16436 640 54 1037 0 -1 idp 591728 377116 54092 7719 0 10362880 JPS Context 8220 20 1 340 0 -1 net 24572 0 0 714 0 -1 Auth Id Table 0 0 0 0 0 -1 NET-PAK 0 0 0 0 0 134217728 PKI-IKE 195736 41792 580 1268 5068 -1 Global memory Chunks: NAME SIZE SYS_MEM ALLOCMEM NALLOC NFREE MAX =========================================================================== Ext Auth Queue Table 2256 6816 0 0 3 6144 br_walk_Q 8 1056 0 0 85 -1 dmhash 20 0 0 0 0 -1 dm 32 0 0 0 0 -1 sip-alg-rm-hash 8 0 0 0 0 -1 sip-alg-tsx 116 0 0 0 0 -1 sip-alg-call 1072 0 0 0 0 -1 User Auth Msg Bufs 1004 0 0 0 0 4096 User Auth Table 432 0 0 0 0 4096 Dlog buffer 0 256 8096 256 1 30 256 Dlog Queue 41988 84056 41988 1 2 4 v6-acl-info 32 0 0 0 0 -1 acl-item 32 0 0 0 0 -1 arp 100 8148 500 5 73 1024 xlate-ctx 36 0 0 0 0 96 dip-in 44 0 0 0 0 32 tcp 436 7956 3052 7 11 -1 Session 40 0 0 0 0 2032 BR table bin nodes 16 2076 16 1 101 4096 BR table big nodes 80 10200 7760 97 24 4096 BR base table 56 456 392 7 0 2048 Link List Nodes 8 0 0 0 0 -1 Hash Table Nodes 8 0 0 0 0 -1 New Kernel Timer 12 16456 864 105 1431 -1 vlsm 20 8220 4220 211 130 -1 =============================================================================== get net-pak total memory: 2850880, default size: 1792, max size: 16384 paks total: 2064, free: 2064, failed: 0 name memory total bufsize free max hit miss tiny 02223880 136064 256 200 200 271870 1 small 022523e0 468064 512 500 500 6792 0 median 022dafe0 1192064 768 1000 1000 71014 0 big 023de980 664864 1792 300 300 52185 0 large 02475b20 226064 4096 50 50 0 0 huge 024ab1c0 96464 9216 10 10 0 0 giant 024c2680 67296 16384 4 4 0 0 &tcp_input_queue length: 0 &arp_req_ingress_queue length: 0 &arp_req_egress_queue length: 0 &l2tp_input_queue length: 0 name max cur write read full delay Applications out-nsrp 256 0 0 0 0 0 out-high 256 0 0 0 0 0 out-norm 256 0 119305 119305 0 3 out-loop 256 0 72 72 0 0 reinject 256 0 10 10 0 0 in 0/ 2 256 0 874 874 0 1250 SELF_APP_SVR_OTHER in 1/ 0 256 0 2692 2692 0 27 SELF_APP_SVR_TELNET in 2/ 0 256 0 1894 1894 0 1441 SELF_APP_SVR_SSH in 3/ 0 256 0 0 0 0 0 SELF_APP_SVR_BGP in 4/ 0 256 0 0 0 0 0 SELF_APP_SVR_OSPF in 5/ 0 256 0 0 0 0 0 SELF_APP_SVR_RIP in 6/ 0 256 0 0 0 0 0 SELF_APP_SVR_PIM in 7/ 0 256 0 0 0 0 0 SELF_APP_SVR_RIPNG in 8/ 0 256 0 0 0 0 0 SELF_PAK_NSRP in 9/ 0 256 0 106 106 0 21 SELF_APP_CLT_TRACK SELF_APP_CLT_CLIPING in 10/ 1 256 0 149141 149141 0 5 SELF_PAK_LOOPBACK in 11/ 1 256 0 0 0 0 0 SELF_APP_SVR_L2TP in 12/ 1 256 0 0 0 0 0 SELF_APP_SVR_IKE in 13/ 1 256 0 0 0 0 0 SELF_APP_SVR_VPNM in 14/ 1 256 0 0 0 0 0 SELF_APP_SVR_WEBAUTH in 15/ 1 256 0 5006 5006 0 378 SELF_PAK_ARP in 16/ 1 256 0 25 25 0 1 SELF_APP_CLT_ACE SELF_APP_CLT_AV SELF_APP_CLT_RADIUS SELF_APP_CLT_URLBLK in 17/ 1 256 0 0 0 0 0 SELF_APP_CLT_LDAP SELF_APP_CLT_PKI in 18/ 1 256 0 0 0 0 0 SELF_APP_SVR_NSGP SELF_APP_CLT_NSGP in 19/ 1 256 0 0 0 0 0 SELF_APP_SVR_IGMP in 20/ 2 256 0 0 0 0 0 SELF_APP_SVR_SME in 21/ 2 256 0 0 0 0 0 SELF_APP_SVR_SNMP in 22/ 2 256 0 0 0 0 0 SELF_APP_SVR_TFTP in 23/ 2 256 0 0 0 0 0 SELF_APP_SVR_SMTP in 24/ 2 256 0 2590 2590 0 23 SELF_APP_SVR_ICMP in 25/ 2 256 0 49230 49230 0 98 SELF_APP_SVR_DHCP SELF_APP_SVR_DHCPRELAY in 26/ 2 256 0 70003 70003 0 1991 SELF_APP_SVR_SSL SELF_APP_SVR_WEBMNG in 27/ 2 256 0 0 0 0 0 SELF_APP_SVR_DNS in 28/ 2 256 0 0 0 0 0 SELF_APP_CLT_NTP SELF_APP_CLT_NACN in 29/-1 256 0 0 0 0 0 in 30/-1 256 0 0 0 0 0 in 31/-1 256 0 0 0 0 0 scheduling category 0, pak quota 72, 9 queues: 9 8 7 6 5 4 3 2 1 scheduling category 1, pak quota 40, 10 queues: 19 18 17 16 15 14 13 12 11 10 scheduling category 2, pak quota 20, 10 queues: 28 27 26 25 24 23 22 21 20 0 Packets total: 2064, free: 2064, failed: 0 name reserved in use failed root 206 0 0 0 name pool quota in use failed heap quota url filtering 1238 0 0 0 asp 1857 0 0 0 DI 1651 0 0 0 rsm 291 0 0 0 Packets total from mm pool: 0 Packets freed back to mm pool: 0 pool tiny: pool small: pool median: pool big: pool large: pool huge: pool giant: =============================================================================== get file flash:/crashdump.dmp 16384 flash:/burnin_log3 20480 flash:/burnin_log2 20480 flash:/burnin_log1 20480 flash:/burnin_log0 20480 flash:/dhcpservl.txt 8 flash:/envar.rec 70 flash:/ns_sys_config 2069 =============================================================================== get system Product Name: SSG5-Serial-WLAN Serial Number: 0162092006004786, Control Number: 00000000 Hardware Version: 0710(0)-(00), FPGA checksum: 00000000, VLAN1 IP (0.0.0.0) Software Version: 5.4.0r1.0, Type: Firewall+VPN Feature: AV-K Compiled by build_master at: Tue Jul 18 22:22:58 PDT 2006 Base Mac: 0014.f6ef.7340 File Name: ssg5ssg20.5.4.0r1.0, Checksum: 1cee3ef2 , Total Memory: 256MB Date 03/05/2009 21:31:13, Daylight Saving Time enabled The Network Time Protocol is Disabled Up 82 hours 56 minutes 29 seconds Since 02Mar2009:10:34:44 Total Device Resets: 2, Last Device Reset at: 02/27/2009 19:15:53 System in NAT/route mode. Use interface IP, Config Port: 80 User Name: root Interface serial0/0: description serial0/0 number 25, if_info 2200, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.7359 bandwidth: physical 92kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps Interface ethernet0/0: description ethernet0/0 number 0, if_info 0, if_index 0, mode route link up, phy-link up/full-duplex vsys Root, zone Untrust, vr trust-vr dhcp client disabled PPPoE disabled admin mtu 0, operating mtu 1500, default mtu 1500 *ip 10.0.11.2/25 mac 0014.f6ef.7340 *manage ip 10.0.11.2, mac 0014.f6ef.7340 route-deny disable bandwidth: physical 100000kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps Interface ethernet0/1: description ethernet0/1 number 5, if_info 440, if_index 0, mode nat link down, phy-link down vsys Root, zone DMZ, vr trust-vr dhcp client disabled PPPoE disabled admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.7345 *manage ip 0.0.0.0, mac 0014.f6ef.7345 bandwidth: physical 0kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps Interface ethernet0/2: description ethernet0/2 number 6, if_info 528, if_index 0 link down, phy-link down member of bgroup0 vsys Root, zone Null, vr untrust-vr *ip 0.0.0.0/0 mac 0014.f6ef.7346 Interface ethernet0/3: description ethernet0/3 number 7, if_info 616, if_index 0 link up, phy-link up/half-duplex member of bgroup0 vsys Root, zone Null, vr untrust-vr *ip 0.0.0.0/0 mac 0014.f6ef.7347 Interface ethernet0/4: description ethernet0/4 number 8, if_info 704, if_index 0 link down, phy-link down member of bgroup0 vsys Root, zone Null, vr untrust-vr *ip 0.0.0.0/0 mac 0014.f6ef.7348 Interface ethernet0/5: description ethernet0/5 number 9, if_info 792, if_index 0 link down, phy-link down member of bgroup0 vsys Root, zone Null, vr untrust-vr *ip 0.0.0.0/0 mac 0014.f6ef.7349 Interface ethernet0/6: description ethernet0/6 number 10, if_info 880, if_index 0 link down, phy-link down member of bgroup0 vsys Root, zone Null, vr untrust-vr *ip 0.0.0.0/0 mac 0014.f6ef.734a Interface wireless0/0: description wireless0/0 number 21, if_info 1848, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.7355 Interface wireless0/1: description wireless0/1 number 22, if_info 1936, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.7356 Interface wireless0/2: description wireless0/2 number 23, if_info 2024, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.7357 Interface wireless0/3: description wireless0/3 number 24, if_info 2112, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.7358 Interface bgroup0: description bgroup0 number 11, if_info 968, if_index 0, mode route link up, phy-link up/half-duplex vsys Root, zone Trust, vr trust-vr dhcp client disabled PPPoE disabled admin mtu 0, operating mtu 1500, default mtu 1500 *ip 128.1.1.18/24 mac 0014.f6ef.734b *manage ip 128.1.1.18, mac 0014.f6ef.734b route-deny disable bandwidth: physical 100000kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps Interface bgroup1: description bgroup1 number 12, if_info 1056, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.734c bandwidth: physical 0kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps Interface bgroup2: description bgroup2 number 13, if_info 1144, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.734d bandwidth: physical 0kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps Interface bgroup3: description bgroup3 number 14, if_info 1232, if_index 0 link down, phy-link down vsys Root, zone Null, vr untrust-vr admin mtu 0, operating mtu 1500, default mtu 1500 *ip 0.0.0.0/0 mac 0014.f6ef.734e bandwidth: physical 0kbps, configured egress [gbw 0kbps mbw 0kbps] configured ingress mbw 0kbps, current bw 0kbps total allocated gbw 0kbps =============================================================================== get nvram Magic 99ab88cd, cksum ac95b83c, flag 0010, sw 5.4.0 RAM 0/0 TFTP: 192.168.170.86->192.168.170.212,ssg5ssg20.5.4.0r1.0 System up time -1 =============================================================================== get performance Average System Utilization: 1% (flow 1 task 1) Last 60 seconds: 59: 2( 1 1) 58: 2( 1 1) 57: 2( 1 1) 56: 2( 1 1) 55: 2( 1 1) 54: 2( 1 1) 53: 2( 1 1) 52: 2( 1 1) 51: 2( 1 1) 50: 2( 1 1) 49: 2( 1 1) 48: 2( 1 1) 47: 2( 1 1) 46: 2( 1 1) 45: 2( 1 1) 44: 2( 1 1) 43: 2( 1 1) 42: 2( 1 1) 41: 2( 1 1) 40: 2( 1 1) 39: 2( 1 1) 38: 2( 1 1) 37: 2( 1 1) 36: 2( 1 1) 35: 2( 1 1) 34: 2( 1 1) 33: 2( 1 1) 32: 2( 1 1) 31: 2( 1 1) 30: 2( 1 1) 29: 2( 1 1) 28: 2( 1 1) 27: 2( 1 1) 26: 2( 1 1) 25: 2( 1 1) 24: 2( 1 1) 23: 2( 1 1) 22: 2( 1 1) 21: 2( 1 1) 20: 2( 1 1) 19: 2( 1 1) 18: 2( 1 1) 17: 2( 1 1) 16: 2( 1 1) 15: 2( 1 1) 14: 2( 1 1) 13: 2( 1 1) 12: 2( 1 1) 11: 2( 1 1) 10: 2( 1 1) 9: 2( 1 1) 8: 2( 1 1) 7: 2( 1 1) 6: 2( 1 1) 5: 2( 1 1) 4: 2( 1 1) 3: 2( 1 1) 2: 2( 1 1) 1: 2( 1 1) 0: 2( 1 1) Last 60 minutes: 59: 2( 1 1) 58: 2( 1 1) 57: 2( 1 1) 56: 2( 1 1) 55: 2( 1 1) 54: 2( 1 1) 53: 2( 1 1) 52: 2( 1 1) 51: 2( 1 1) 50: 2( 1 1) 49: 2( 1 1) 48: 2( 1 1) 47: 2( 1 1) 46: 2( 1 1) 45: 2( 1 1) 44: 2( 1 1) 43: 2( 1 1) 42: 2( 1 1) 41: 2( 1 1) 40: 2( 1 1) 39: 2( 1 1) 38: 2( 1 1) 37: 2( 1 1) 36: 2( 1 1) 35: 2( 1 1) 34: 2( 1 1) 33: 2( 1 1) 32: 2( 1 1) 31: 2( 1 1) 30: 2( 1 1) 29: 2( 1 1) 28: 2( 1 1) 27: 2( 1 1) 26: 2( 1 1) 25: 2( 1 1) 24: 2( 1 1) 23: 2( 1 1) 22: 2( 1 1) 21: 2( 1 1) 20: 2( 1 1) 19: 2( 1 1) 18: 2( 0 1) 17: 2( 1 1) 16: 2( 0 1) 15: 2( 1 1) 14: 2( 0 1) 13: 2( 1 1) 12: 2( 1 1) 11: 2( 0 2) 10: 2( 0 2) 9: 3( 0 4) 8: 2( 0 2) 7: 3( 1 3) 6: 2( 1 1) 5: 2( 1 1) 4: 2( 1 1) 3: 2( 1 1) 2: 2( 1 1) 1: 2( 1 1) 0: 2( 1 1) Last 24 hours: 23: 2( 0 1) 22: 2( 1 1) 21: 2( 1 1) 20: 2( 0 1) 19: 2( 0 1) 18: 2( 0 1) 17: 2( 0 1) 16: 1( 1 1) 15: 1( 0 1) 14: 2( 1 1) 13: 2( 1 1) 12: 2( 1 1) 11: 2( 1 1) 10: 2( 1 1) 9: 2( 1 1) 8: 2( 1 1) 7: 2( 1 1) 6: 2( 1 1) 5: 2( 1 1) 4: 2( 1 1) 3: 2( 1 1) 2: 2( 1 1) 1: 2( 1 1) 0: 2( 1 1) Last 60 seconds: 0: 1 1: 1 2: 1 3: 1 4: 1 5: 1 6: 1 7: 1 8: 1 9: 1 10: 1 11: 1 12: 1 13: 1 14: 1 15: 1 16: 1 17: 1 18: 1 19: 1 20: 1 21: 1 22: 1 23: 1 24: 1 25: 1 26: 1 27: 1 28: 1 29: 1 30: 1 31: 1 32: 1 33: 1 34: 1 35: 1 36: 1 37: 1 38: 1 39: 1 40: 1 41: 1 42: 1 43: 1 44: 1 45: 1 46: 1 47: 1 48: 1 49: 1 50: 1 51: 1 52: 1 53: 1 54: 1 55: 1 56: 1 57: 1 58: 1 59: 1 Last 60 minutes: 0: 34 1: 60 2: 50 3: 11 4: 76 5: 15 6: 13 7: 31 8: 10 9: 16 10: 18 11: 60 12: 72 13: 68 14: 69 15: 60 16: 62 17: 65 18: 65 19: 65 20: 60 21: 62 22: 60 23: 60 24: 60 25: 104 26: 120 27: 137 28: 125 29: 120 30: 121 31: 120 32: 120 33: 121 34: 132 35: 127 36: 120 37: 125 38: 121 39: 122 40: 127 41: 205 42: 132 43: 106 44: 73 45: 75 46: 75 47: 80 48: 35 49: 18 50: 11 51: 2 52: 2 53: 76 54: 92 55: 74 56: 75 57: 74 58: 64 59: 75 Last 24 hours: 0: 3627 1: 7658 2: 49756 3: 3537 4: 5140 5: 8262 6: 8056 7: 6249 8: 1675 9: 1553 10: 227 11: 2 12: 0 13: 0 14: 0 15: 0 16: 0 17: 0 18: 0 19: 0 20: 1 21: 0 22: 1 23: 1 =============================================================================== get vrouter protocol pim =============================================================================== get vrouter protocol rip =============================================================================== get vrouter protocol bgp =============================================================================== get vrouter protocol ospf =============================================================================== get route vrouter (untrust-vr) ------------------------------------------- Routing Table -------------------------------------------------------------------------------- Total 0/max entries Interfaces -------------------------------------------------------------------------------- loopback, hidden, null, ethernet0/2, ethernet0/3, ethernet0/4 ethernet0/5, ethernet0/6, bgroup1, bgroup2, bgroup3, wireless0/1 wireless0/2, wireless0/3, serial0/0, wireless0/0 Default-vrouter: No Shared-vrouter: Yes nsrp-config-sync: Yes Advertise-Inactive-Interface: Disabled Source-Based-Routing: Disabled SIBR-Routing: Disabled Ignore-Subnet-Conflict: Disabled ECMP-Routing: Disabled vrouter (trust-vr) ------------------------------------------- Routing Table -------------------------------------------------------------------------------- H: Host C: Connected S: Static A: Auto-Exported I: Imported R: RIP P: Permanent D: Auto-Discovered iB: IBGP eB: EBGP O: OSPF E1: OSPF external type 1 E2: OSPF external type 2 Total 26/max entries ID IP-Prefix Interface Gateway P Pref Mtr Vsys -------------------------------------------------------------------------------- * 10 10.85.0.95/32 bgroup0 0.0.0.0 SP 20 1 Root * 2 10.0.11.2/32 eth0/0 0.0.0.0 H 0 0 Root * 8 10.2.2.6/32 bgroup0 0.0.0.0 SP 20 1 Root * 20 10.25.60.55/32 bgroup0 0.0.0.0 SP 20 1 Root * 33 10.16.0.63/32 bgroup0 0.0.0.0 SP 20 1 Root * 9 10.16.0.90/32 bgroup0 0.0.0.0 SP 20 1 Root * 18 10.25.60.104/32 bgroup0 0.0.0.0 SP 20 1 Root * 19 10.25.60.101/32 bgroup0 0.0.0.0 SP 20 1 Root * 23 10.25.60.98/32 bgroup0 0.0.0.0 SP 20 1 Root * 24 10.25.60.96/32 bgroup0 0.0.0.0 SP 20 1 Root * 14 10.1.95.52/32 bgroup0 0.0.0.0 SP 20 1 Root * 15 10.1.95.53/32 bgroup0 0.0.0.0 SP 20 1 Root * 16 10.1.95.54/32 bgroup0 0.0.0.0 SP 20 1 Root * 21 10.25.60.74/32 bgroup0 0.0.0.0 SP 20 1 Root * 25 10.25.60.73/32 bgroup0 0.0.0.0 SP 20 1 Root * 13 10.1.95.51/32 bgroup0 0.0.0.0 SP 20 1 Root * 17 10.1.95.60/32 bgroup0 0.0.0.0 SP 20 1 Root * 11 10.1.95.59/32 bgroup0 0.0.0.0 SP 20 1 Root * 22 10.25.60.94/32 bgroup0 0.0.0.0 SP 20 1 Root * 1 10.0.11.0/25 eth0/0 0.0.0.0 C 0 0 Root * 5 128.1.1.0/24 bgroup0 0.0.0.0 C 0 0 Root * 6 128.1.1.18/32 bgroup0 0.0.0.0 H 0 0 Root * 12 10.1.95.201/32 bgroup0 0.0.0.0 SP 20 1 Root * 30 192.168.161.27/32 eth0/0 10.0.11.1 SP 20 1 Root * 32 192.168.149.25/32 eth0/0 10.0.11.1 SP 20 1 Root * 31 192.168.149.2/32 eth0/0 10.0.11.1 SP 20 1 Root Interfaces -------------------------------------------------------------------------------- l2v, self, v1-trust, v1-untrust, v1-dmz, bgroup0 ethernet0/0, ethernet0/1, vlan1, hidden.1, tunnel Auto-exporting: Disabled Default-vrouter: Yes Shared-vrouter: Yes nsrp-config-sync: Yes System-Default-route: Not present Advertise-Inactive-Interface: Disabled Source-Based-Routing: Disabled SIBR-Routing: Disabled SNMP Trap: Public Ignore-Subnet-Conflict: Disabled ECMP-Routing: Disabled =============================================================================== get session alloc 5/max 4064, alloc failed 0, mcast alloc 0, di alloc failed 0 total reserved 0, free sessions in shared pool 4059 =============================================================================== get auth No users in table. no entries. Id : 0 Auth Server : Local Type : Local Idle Timeout : 10 Forced Timeout: 0 (Disabled) =============================================================================== get admin auth no entries. Admin user authentication timeout: 0 minutes Admin user authentication type: Local =============================================================================== get tcp tcp checksum error: 0, tcp http ping: 0 tcp user auth: 0, tcp unknown port 3 tcp no more socket: 0, tcp syn pak error: 27 tcp socket full drop count: 30 tcp ooo segs: 0, tcp ooo segs drop count: 0 max ooo segs: 32, default max ooo segs 32 Total sock: 7/64, debug remote port: 65535 0: inuse: 1, mode: 0, state: 0, ifnum: -1, idle: 0, timer 0 ::/80, ::/0, window: 0/0/0 1: inuse: 1, mode: 0, state: 0, ifnum: -1, idle: 0, timer 0 ::/443, ::/0, window: 0/0/0 2: inuse: 1, mode: 0, state: 0, ifnum: -1, idle: 0, timer 0 ::/23, ::/0, window: 0/0/0 51: inuse: 1, mode: 0, state: 0, ifnum: -1, idle: 0, timer 0 ::/22, ::/0, window: 0/0/0 53: inuse: 1, mode: 2, state: 4, ifnum: 11, idle: 6, timer 0 128.1.1.18/22, 128.1.1.254/3326, window: 2106960111/167877690/65247 56: inuse: 1, mode: 2, state: 4, ifnum: 11, idle: 0, timer 0 128.1.1.18/80, 128.1.1.254/3338, window: 338227213/1520693782/65444 57: inuse: 1, mode: 2, state: 4, ifnum: 11, idle: 0, timer 0 128.1.1.18/80, 128.1.1.254/3339, window: -1361957077/864175912/65080 =============================================================================== get mac-learn link down clear mac learn table: enable Total 1024, Used 0, Create 0, Ageout 0 Flood 0, BCast 0, ReLearn 0, NoFree 0, Error 0, Drop 0 =============================================================================== get asp Maximum ASP connection: 2032 ASP allocated 0 freed 0 ASP inuse 0 free 2032 ASP currently holding 0 0 0 0 pak, in 0 out 0 ASP currently holding in free list 0 0 0 0 pak Out of TCB count: 0 ASP throttle: on 0, off 0 =============================================================================== get counter Hardware counters for interface serial0/0: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface serial0/0: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface serial0/0: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface ethernet0/0: in bytes 19065838 | out bytes 15105231 | early frame 0 in packets 214941 | out packets 178398 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface ethernet0/0: in bytes 19065838 | out bytes 15105231 in ucast 214310 | out ucast 178398 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface ethernet0/0: in bytes 19027680 | out bytes 14458359 | tcp proxy 0 in packets 214445 | out packets 178398 | tear drop 0 in vlan 0 | out vlan 0 | in permit 18748193 out permit 14380654 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 137181 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 244 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 99171 | policy deny 2419 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 368 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 496 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface ethernet0/1: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface ethernet0/1: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface ethernet0/1: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface ethernet0/2: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface ethernet0/2: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface ethernet0/2: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface ethernet0/3: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface ethernet0/3: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface ethernet0/3: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface ethernet0/4: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface ethernet0/4: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface ethernet0/4: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface ethernet0/5: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface ethernet0/5: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface ethernet0/5: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface ethernet0/6: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface ethernet0/6: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface ethernet0/6: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface wireless0/0: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface wireless0/0: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface wireless0/0: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface wireless0/1: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface wireless0/1: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface wireless0/1: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface wireless0/2: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface wireless0/2: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface wireless0/2: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface wireless0/3: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface wireless0/3: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface wireless0/3: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface bgroup0: in bytes 1993938629 | out bytes 84731256 | early frame 0 in packets 8509096 | out packets 323918 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface bgroup0: in bytes 1993938629 | out bytes 84731256 in ucast 6518409 | out ucast 323930 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface bgroup0: in bytes 1904468005 | out bytes 83480005 | tcp proxy 0 in packets 7686118 | out packets 323930 | tear drop 0 in vlan 0 | out vlan 0 | in permit 32757659 out permit 18463395 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 130985 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 199 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 91 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 176 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 35113 | policy deny 3695 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 821122 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface bgroup1: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface bgroup1: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface bgroup1: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface bgroup2: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface bgroup2: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface bgroup2: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Hardware counters for interface bgroup3: in bytes 0 | out bytes 0 | early frame 0 in packets 0 | out packets 0 | late frame 0 in no buffer 0 | out no buffer 0 | re-xmt limit 0 in overrun 0 | out underrun 0 | drop vlan 0 in coll err 0 | out coll err 0 | out cs lost 0 in misc err 0 | out misc err 0 | in dma err 0 | out bs pak 0 | in crc err 0 | out discard 0 | in align err 0 | out defer 0 | in short frame 0 | out heartbeat 0 | Hardware 64-bit counters for interface bgroup3: in bytes 0 | out bytes 0 in ucast 0 | out ucast 0 in mcast 0 | out mcast 0 in bcast 0 | out bcast 0 Total flow counters for interface bgroup3: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface serial0/0: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface ethernet0/0: in bytes 19027680 | out bytes 14458359 | tcp proxy 0 in packets 214445 | out packets 178398 | tear drop 0 in vlan 0 | out vlan 0 | in permit 18748193 out permit 14380654 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 137181 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 244 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 99171 | policy deny 2419 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 368 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 496 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface ethernet0/1: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface ethernet0/2: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface ethernet0/3: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface ethernet0/4: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface ethernet0/5: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface ethernet0/6: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface wireless0/0: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface wireless0/1: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface wireless0/2: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface wireless0/3: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface bgroup0: in bytes 1904468005 | out bytes 83480005 | tcp proxy 0 in packets 7686118 | out packets 323930 | tear drop 0 in vlan 0 | out vlan 0 | in permit 32757659 out permit 18463395 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 130985 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 199 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 91 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 176 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 35113 | policy deny 3695 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 821122 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface bgroup1: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface bgroup2: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | Flow counters for interface bgroup3: in bytes 0 | out bytes 0 | tcp proxy 0 in packets 0 | out packets 0 | tear drop 0 in vlan 0 | out vlan 0 | in permit 0 out permit 0 | src route 0 | no g-parent 0 ping of death 0 | no gate sess 0 | address spoof 0 in icmp 0 | no nat vector 0 | land attack 0 in self 0 | no map 0 | icmp flood 0 in un-auth 0 | no conn 0 | udp flood 0 in unk prot 0 | no dip 0 | winnuke 0 in vpn 0 | no gate 0 | port scan 0 in other 0 | no xmit vpnf 0 | ip sweep 0 no mac 0 | no route 0 | tcp out of seq 0 mac relearn 0 | no frag sess 0 | wrong intf 0 slow mac 0 | no frag netpak 0 | wrong slot 0 trmng queue 0 | no sa 0 | icmp broadcast 0 trmng drop 0 | no sa policy 0 | illegal pak 0 tiny frag 0 | sa inactive 0 | url block 0 syn frag 0 | sa policy deny 0 | encrypt fail 0 connections 0 | policy deny 0 | mp fail 0 misc prot 0 | auth deny 0 | auth fail 0 loopback drop 0 | big bkstr 0 | proc sess 0 mal url 0 | sessn thresh 0 | invalid zone 0 null zone 0 | no nsp-tunnel 0 | IP cls failure 0 first pak frag 0 | unknown pak 0 | multiauth drop 0 multi-DIP drop 0 | app link down 0 | =============================================================================== get pki ldap-run Getting LOCAL CERT ... IDX ID num X509 Certificate Subject Distinguish Name ================================================================================ ================================================================================ Getting PENDING LOCAL CERT ... IDX ID num X509 Certificate Subject Distinguish Name ================================================================================ ================================================================================ Getting CRL ... IDX ID num X509 Certificate Subject Distinguish Name ================================================================================ ================================================================================ Getting CA CERT ... IDX ID num X509 Certificate Subject Distinguish Name ================================================================================ 0000 120848386 CA CERT friendly name <2> OU=Secure Server Certification Authority,O=RSA Data Security , Inc.,C=US, Expire on 01-07-2010 23:59, Issued By: OU=Secure Server Certification Authority,O=RSA Data Security , Inc.,C=US, ================================================================================ Getting REFERENCES OF CA CERT ... IDX ID num X509 Certificate Subject Distinguish Name ================================================================================ 0000 120848385 REFERENCES OF CA CERT friendly name ================================================================================ Getting RSA PUBLIC KEY PAIR OF USER ... IDX ID num X509 Certificate Subject Distinguish Name ================================================================================ ================================================================================ Getting DSA PUBLIC KEY PAIR OF USER ... IDX ID num X509 Certificate Subject Distinguish Name ================================================================================ 0000 120848387 DSA PUBLIC KEY PAIR OF USER friendly name CN=ssh host dsa key,CN=Root, ================================================================================ =============================================================================== get dns DNS Server: Primary : 0.0.0.0, Src Interface: Null Secondary: 0.0.0.0, Src Interface: Null Ternary : 0.0.0.0, Src Interface: Null DNS Cache (Static): DNS Cache (Dynamic): DNS Cache (Unresolved): DNS Cache (Freed): =============================================================================== get vpnmonitor Vpn monitor interval : 10(seconds) Vpn monitor threshold: 10 =============================================================================== get arp usage: 5/1024 miss: 0 always-on-dest: enabled ----------------------------------------------------------------------------------------- IP Mac VR/Interface State Age Retry PakQue Sess_cnt ----------------------------------------------------------------------------------------- 10.0.11.1 001ef70bb01e trust-vr/eth0/0 VLD 372 0 0 2 10.2.2.6 001907daec00 trust-vr/bgroup0 VLD 477 0 0 0 10.85.0.95 001795bb7ad2 trust-vr/bgroup0 VLD 355 0 0 1 128.1.1.42 001907daec00 trust-vr/bgroup0 VLD 367 0 0 0 128.1.1.254 0015609920e6 trust-vr/bgroup0 VLD 231 0 0 4 =============================================================================== get ha nsrp version: 2.0 cluster info: cluster id not set: nsrp is inactive VSD group info: init hold time: 5 heartbeat lost threshold: 3 heartbeat interval: 1000(ms) master always exist: disabled group priority preempt holddown inelig master PB other members total number of vsd groups: 0 Total iteration=0,time=0,max=0,min=0,average=0 RTO mirror info: run time object sync: disabled ping session sync: enabled coldstart sync done nsrp link info: no nsrp link has been defined yet NSRP encryption: disabled NSRP authentication: disabled device based nsrp monitoring threshold: 255, weighted sum: 0, not failed device based nsrp monitor interface: device based nsrp monitor zone: device based nsrp track ip: (weight: 255, disabled) number of gratuitous arps: 4 (default) config sync: enabled track ip: disabled Nsrp arp counts: 4, interval: 1 VSD group has not been defined RTO mirror group has not been defined Session sync times=0, completed=0 RTO message counters: msg name send rcv drop ---------------------------------------------------------------- SESS_CR 0 0 0 SESS_CL 0 0 0 SESS_CH 0 0 0 CMD 0 0 0 SYS_CFG 0 0 0 FILE 0 0 0 CMD_WEB 0 0 0 SAVE 0 0 0 SPI 0 0 0 ARP 0 0 0 HEALTH 0 0 0 EMW 0 0 0 2SYNC 0 0 0 DL_CFG 0 0 0 L2TP_NA 0 0 0 L2TP_TD 0 0 0 L2TP_CC 0 0 0 L2TP_CD 0 0 0 PKI_SYN 0 0 0 VPN_SEQ 0 0 0 DNS 0 0 0 SD 0 0 0 DHCP 0 0 0 PPP 0 0 0 L2TP_DF 0 0 0 NSRP_SYN 0 0 0 SD_SYN 0 0 0 DNS_SYN 0 0 0 GATE_CR 0 0 0 SECURE_ID 0 0 0 RESULT_REPORT 0 0 0 SYS_CFG_SAVE 0 0 0 AT_SYNC 0 0 0 AT_RT_SYNC 0 0 0 SSH_PKA 0 0 0 DHCP_CLIENT 0 0 0 IKE_P1_SA 0 0 0 ST_CLOSE_SESS 0 0 0 ST_UPDATE_SESS 0 0 0 ST_CREATE_SESS 0 0 0 ST_VPN_SEQS 0 0 0 ST_SYNC_ARP 0 0 0 CFG_DIFF 0 0 0 RM 0 0 0 SIP 0 0 0 TIME_REQ 0 0 0 TIME_REP 0 0 0 DI_DB_UPDATE 0 0 0 RT_PPPOE 0 0 0 PPPOE 0 0 0 RPC_INSERT_MAP 0 0 0 RPC_CLEAR_MAP_TABLE 0 0 0 H323 0 0 0 XLATE_CTX 0 0 0 RT_RTSP 0 0 0 RTSP 0 0 0 DIP_IN 0 0 0 H323_IN 0 0 0 PPTP 0 0 0 SCCP 0 0 0 NDP 0 0 0 MGCP 0 0 0 CREATE_GTP 0 0 0 DELETE_GTP 0 0 0 UPDATE_GTP 0 0 0 RT_DOT1X 0 0 0 DOT1X 0 0 0 =============================================================================== get config set clock timezone 5 set vrouter trust-vr sharable set vrouter "untrust-vr" exit set vrouter "trust-vr" unset auto-route-export exit set service "Tuxedo Backup" protocol tcp src-port 0-65535 dst-port 9019-9019 set service "Web-Services" protocol tcp src-port 0-65535 dst-port 91-91 set auth-server "Local" id 0 set auth-server "Local" server-name "Local" set auth-server "Radius MCB" id 1 set auth-server "Radius MCB" server-name "128.1.1.192" set auth-server "Radius MCB" account-type admin set auth-server "Radius MCB" radius secret "64GdKq50NtIAI1s5TrC5+qKB2xnGoxQmuw==" set auth default auth server "Local" set auth radius accounting port 1646 set admin name "root" set admin password "nP+QOtraAvpAc1aK0sNHXRAtZvEWwn" set admin auth timeout 0 set admin auth server "Local" set admin auth banner telnet login "UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED - Your access to this network may be monitored & recorded for quality assurance, SECURITY, performance & maintenance purpose -" set admin auth banner console login "************This system is the property of MCB bank Limited************ " unset admin hw-reset set admin format dos set zone "Trust" vrouter "trust-vr" set zone "Untrust" vrouter "trust-vr" set zone "DMZ" vrouter "trust-vr" set zone "VLAN" vrouter "trust-vr" set zone "Untrust-Tun" vrouter "trust-vr" set zone "Trust" tcp-rst set zone "Untrust" block unset zone "Untrust" tcp-rst set zone "DMZ" tcp-rst set zone "VLAN" block unset zone "VLAN" tcp-rst set zone "Untrust" screen tear-drop set zone "Untrust" screen syn-flood set zone "Untrust" screen ping-death set zone "Untrust" screen ip-filter-src set zone "Untrust" screen land set zone "V1-Untrust" screen tear-drop set zone "V1-Untrust" screen syn-flood set zone "V1-Untrust" screen ping-death set zone "V1-Untrust" screen ip-filter-src set zone "V1-Untrust" screen land set interface "ethernet0/0" zone "Untrust" set interface "ethernet0/1" zone "DMZ" set interface "wireless0/0" zone "Null" set interface "bgroup0" zone "Trust" set interface bgroup0 port ethernet0/2 set interface bgroup0 port ethernet0/3 set interface bgroup0 port ethernet0/4 set interface bgroup0 port ethernet0/5 set interface bgroup0 port ethernet0/6 unset interface vlan1 ip set interface ethernet0/0 ip 10.0.11.2/25 set interface ethernet0/0 route set interface bgroup0 ip 128.1.1.18/24 set interface bgroup0 route unset interface vlan1 bypass-others-ipsec unset interface vlan1 bypass-non-ip set interface ethernet0/0 ip manageable set interface bgroup0 ip manageable set interface ethernet0/0 manage ping set interface ethernet0/0 manage ssh set interface ethernet0/0 manage telnet set interface ethernet0/0 manage web unset interface bgroup0 manage telnet set auth-server "Radius MCB" src-interface "bgroup0" set interface bgroup0 dhcp server service set interface bgroup0 dhcp server auto set interface bgroup0 dhcp server option netmask 255.255.255.0 unset interface bgroup0 dhcp server config next-server-ip set interface ethernet0/0 dip 4 10.0.11.12 10.0.11.12 fix-port set interface ethernet0/0 dip 5 10.0.11.13 10.0.11.13 fix-port set interface "ethernet0/0" mip 10.0.11.10 host 10.2.2.6 netmask 255.255.255.255 vr "trust-vr" set interface "serial0/0" modem settings "USR" init "AT&F" set interface "serial0/0" modem settings "USR" active set interface "serial0/0" modem speed 115200 set interface "serial0/0" modem retry 3 set interface "serial0/0" modem interval 10 set interface "serial0/0" modem idle-time 10 set flow tcp-mss unset flow no-tcp-seq-check set flow tcp-syn-check set pki authority default scep mode "auto" set pki x509 default cert-path partial set address "Trust" "10.2.2.6/32" 10.2.2.6 255.255.255.255 set address "Trust" "10.16.0.90/32" 10.16.0.90 255.255.255.255 set address "Trust" "128.3.3.101/32" 128.3.3.101 255.255.255.255 set address "Trust" "128.3.3.201/32" 128.3.3.201 255.255.255.255 set address "Trust" 128.3.3.201 255.255.255.255 set address "Trust" 10.25.60.0 255.255.255.0 set address "Trust" 10.1.95.0 255.255.255.0 set address "Trust" 128.1.1.254 255.255.255.255 set address "Trust" "Zain" 10.85.0.95 255.255.255.255 "" set address "Untrust" "10.0.11.10/32" 10.0.11.10 255.255.255.255 set address "Untrust" "192.168.149.2/32" 192.168.149.2 255.255.255.255 set address "Untrust" "192.168.149.25/32" 192.168.149.25 255.255.255.255 set address "Untrust" "192.168.161.27/32" 192.168.161.27 255.255.255.255 set address "Untrust" "Router" 10.0.11.1 255.255.255.255 set group address "Trust" "CNS" set group address "Trust" "CNS" add "" set group address "Trust" "CNS" add set group address "Trust" "CNS" add set ike respond-bad-spi 1 unset ike ikeid-enumeration unset ipsec access-session enable set ipsec access-session maximum 5000 set ipsec access-session upper-threshold 0 set ipsec access-session lower-threshold 0 set ipsec access-session dead-p2-sa-timeout 0 unset ipsec access-session log-error unset ipsec access-session info-exch-connected unset ipsec access-session use-error-log set arp age 500 set arp always-on-dest set url protocol websense exit set policy id 1 from "Untrust" to "Trust" "192.168.149.2/32" "MIP(10.0.11.10)" "ANY" permit log set policy id 1 set src-address "Router" set log session-init exit set policy id 2 from "Trust" to "Untrust" "CNS" "192.168.149.25/32" "ANY" nat src dip-id 4 permit log count set policy id 2 set log session-init exit set policy id 3 from "Trust" to "Untrust" "Any" "ANY" nat src permit log count set policy id 3 set src-address set log session-init exit set policy id 4 from "Trust" to "Untrust" "10.2.2.6/32" "Any" "ANY" permit log set policy id 4 set log session-init exit set monitor cpu 100 set global-pro policy-manager primary outgoing-interface ethernet0/0 set global-pro policy-manager secondary outgoing-interface ethernet0/0 set nsmgmt bulkcli reboot-timeout 60 set ssh version v2 set ssh enable set config lock timeout 5 set wlan 0 channel auto set wlan 1 channel auto set snmp port listen 161 set snmp port trap 162 set vrouter "untrust-vr" exit set vrouter "trust-vr" unset add-default-route set route 10.2.2.6/32 interface bgroup0 preference 20 permanent set route 10.16.0.90/32 interface bgroup0 preference 20 permanent set route 10.85.0.95/32 interface bgroup0 preference 20 permanent set route 10.1.95.59/32 interface bgroup0 preference 20 permanent set route 10.1.95.201/32 interface bgroup0 preference 20 permanent set route 10.1.95.51/32 interface bgroup0 preference 20 permanent set route 10.1.95.52/32 interface bgroup0 preference 20 permanent set route 10.1.95.53/32 interface bgroup0 preference 20 permanent set route 10.1.95.54/32 interface bgroup0 preference 20 permanent set route 10.1.95.60/32 interface bgroup0 preference 20 permanent set route 10.25.60.104/32 interface bgroup0 preference 20 permanent set route 10.25.60.101/32 interface bgroup0 preference 20 permanent set route 10.25.60.55/32 interface bgroup0 preference 20 permanent set route 10.25.60.74/32 interface bgroup0 preference 20 permanent set route 10.25.60.94/32 interface bgroup0 preference 20 permanent set route 10.25.60.98/32 interface bgroup0 preference 20 permanent set route 10.25.60.96/32 interface bgroup0 preference 20 permanent set route 10.25.60.73/32 interface bgroup0 preference 20 permanent set route 192.168.161.27/32 interface ethernet0/0 gateway 10.0.11.1 preference 20 permanent set route 192.168.149.2/32 interface ethernet0/0 gateway 10.0.11.1 preference 20 permanent set route 192.168.149.25/32 interface ethernet0/0 gateway 10.0.11.1 preference 20 permanent set route 10.16.0.63/32 interface bgroup0 preference 20 permanent exit set vrouter "untrust-vr" exit set vrouter "trust-vr" exit =============================================================================== get license-key Sessions: 4064 sessions Capacity: unlimited number of users NSRP: Disable VPN tunnels: 25 tunnels Vsys: None Vrouters: 3 virtual routers Zones: 8 zones VLANs: 10 vlans Drp: Enable Deep Inspection: Enable Deep Inspection Database Expire Date: Disable Signature pack: Signature update key is missing IDP: Disable AV: Disable(0) Anti-Spam: Disable(0) Url Filtering: Disable Update server url: nextwave.netscreen.com/key_retrieval License key auto update : Enabled Auto update interval : 1 days Next scheduled update : 1 day(s) 0 hour(s) 0 minute(s) =============================================================================== get pim Multicast Information for vrouter (untrust-vr) ----------------------------------------- Virtual Router: untrust-vr ------------------------ Vrouter multicast route limit : not set Number of Multicast routes in vrouter : 0 Multiple input interfaces for S,G : not allowed Registered Multicast Protocols : Interface In-Pkt Out-Pkt Cachemiss Protocol -------------------------------------------------------- Flags: F - Forwarding, U - Pruned, D - Down, B - Backup, T - Registering Virtual router: untrust-vr ----------------------------------------------------------------------------- Total multicast routes : 0/system-max Source Group Iif -> Oif-List ----------------------------------------------------------------------------- Multicast Information for vrouter (trust-vr) ----------------------------------------- Virtual Router: trust-vr ------------------------ Vrouter multicast route limit : not set Number of Multicast routes in vrouter : 0 Multiple input interfaces for S,G : not allowed Registered Multicast Protocols : Interface In-Pkt Out-Pkt Cachemiss Protocol -------------------------------------------------------- Flags: F - Forwarding, U - Pruned, D - Down, B - Backup, T - Registering Virtual router: trust-vr ----------------------------------------------------------------------------- Total multicast routes : 0/system-max Source Group Iif -> Oif-List -----------------------------------------------------------------------------