Specifications

Security Configuration Command Set
Configuring Denial of Service (DoS) Prevention
Matrix DFE-Gold Series Configuration Guide 13-175
13.3.14.1 show hostdos
Use this command to display Denial of Service security status and counters.
show hostdos
Syntax Description
None,
Command Type
Router command.
Command Mode
Global configuration: Matrix>Router1(config)#
Command Defaults
None.
Example
This example shows how to display Denial of Service security status and counters. For details on
how to set these parameters, refer to Section 13.3.14.2
:
NOTE: When fragmented ICMP packets protection is enabled, the Ping of Death
counter will not be incremented. Ping of Death is a subset of the fragmented ICMP
function.
Matrix>Router1(config)#show hostdos
LANDd Attack (Destination IP = Source IP)
Disabled
Spoofed Address Check
Disabled
IP packet with multicast/broadcast source address
Always enabled
0 attacks
Fragmented ICMP traffic
Disabled
Large ICMP packet
Disabled
Ping-of-Death attack
Always enabled
0 attacks
Port Scanning
Disabled