HP-UX IPFilter Version 15.01 Administrator's Guide

Viewing IPFilter Statistics and Active Rules with ipfstat
The ipfstat utility displays IPFilter statistics, including how many packets have been passed
or blocked, whether the packets were logged or not, how many state entries have been made,
and DCA statistics. You can also use options with ipfstat to display active rules.
Syntax
ipfstat [-options]
Options
For a complete list of ipfstat options, see the ipfstat manpage. If you do not specify any options,
ipfstat displays total packet counts for all rules and general statistics.
-6
Shows the output for IPv6 rules. This option is valid only with the following
options, and must be specified before the other options:
• -i
• -o
• -h
• -r
• -vL
If you do not specify the -6 option, these commands show the output for
IPv4 rules only.
For example, to list the active inbound and outbound (-io) IPv6 rules, use
the following command:
ipfstat -6 -io
-i
Displays the active rules for inbound packets. If you specify this option
with the -6 option, ipfstat displays the IPv6 rules; if you specify this
option without the -6 option, it displays the IPv4 rules.
-o
Displays the active rules for outbound packets. If you specify this option
with the -6 option, ipfstat displays the IPv6 rules; if you specify this
option without the -6 option, it displays the IPv4 rules.
-h
Displays the active rules and the number of matching packets (hit count)
for each rule. Use with the -i or -o options.
-s
Displays state table statistics.
-sl
Displays detailed state table statistics.
-n When used with the -i or -o options, it displays the rules, preceded by
group number and rule number in the format
@group_number:rule_number.
-L
Displays global limit statistics.
-Lv
Displays detailed (verbose) global limit statistics. If you specify this option
with the -6 option, ipfstatdisplays the IPv6 rule statistics; if you specify
this option without the -6 option, it displays the IPv4 rule statistics.
-r group:rule
Displays the limit statistic by rule number. If you specify this option with
the -6 option, ipfstatdisplays the IPv6 rule; if you specify this option
without the -6 option, it displays the IPv4 rule.
-v
Sets verbose mode. Use for debugging.
74 Troubleshooting HP-UX IPFilter