Options

-family=<String>

Application family.

-name=<String>

Application name (wildcards allowed).

-num={ALL | <n>}

Limit display to <n> applications. (Default: 20)

-risk={VERY_LOW | LOW | MEDIUM | HIGH | VERY_HIGH}

Application risk level.

 

-show-applications

Shows applications matching certain criteria.

-tag=<String>

Application tag.

-verbose

Verbose (more information).

Options

-all

Show all ARP entries.

-flush

Flush ARP cache of all specified interfaces. (Admin only)

-hw=<pattern>

Show only hardware addresses matching pattern.

-hwsender=<String>

Sender ethernet address.

-ip=<pattern>

Show only IP addresses matching pattern.

-notify=<ip>

Send gratuitous ARP for <ip>.

-num=<n>

Show only the first <n> entries per interface. (Default: 20)

-show

Show ARP entries for given interface(s).

<interface>

Interface name.

Options

-verbose

Verbose.

{ALL | NONE | <interface>}

Interface name.

Options

-all

List all users.

-logout_id

Logout user. (Admin only)

-logout_name

Logout user. (Admin only)

-logout_src

Logout user. (Admin only)

-num=<Integer>

Number of users to show.

-privilege

Show privileges.

-profile

Find authentication profile.

-show

Show user information.

<Integer>

User ID.

<Interface>

Receiving Interface. (Default: any)

<IP>

Source IP.

<User Authentication Profile>

Authentication Profile.

<username>

Username.

Options

-aspath=<AS path>

Display prefixes matching the AS path regular expression.

-bfd

Show BFD overview.

-category={ALL | BGP-ALL | BFD-ALL | ROUTE-ALL | BGP-UPD | ROUTE-ADD | ROUTE-MOD | ROUTE-DEL}

Snooping categories.

 

-execute={RESTART-FULL | NEIGHBOR-RECONNECT}

Execute command. (Admin only)

 

-ipv6

IPv6.

-level=<0...7>

Snooping level (higher number equals more details).

-neighbor=<neighbor>

Display the specified neighbor only.

-neighbors

Show neighbors.

-network=<network>

Display prefixes covering the specified network.

-num={ALL | <n>}

Limit display to <n> entries. (Default: 100)

-prefixes

Show received/announced prefixes.

-prefixes-advertised

Lists prefixes advertised to neighbor.

-prefixes-received

Lists prefixes received from neighbor.

-routemap=<routemap>

Display prefixes matching the specified route-map.

-snoop={ON | OFF}

Control BGP snoop debugging.

-techsupport

Show internal technical support information.

-verbose

Verbose data.

Options

-add

Add blacklisted entry. (Admin only)

-all

Remove all blacklisted entries. (Admin only)

-destip=<ip address>

Destination IP address to block/unblock.

-lookup

Lookup blacklisted entries.

-num=<number>

Limit output to <n> entries. (Default: 10)

-port=<port range>

Destination port range to block/unblock. The option can only be set when 'proto' option is set to 'ICMP', 'SCTP', 'TCP' or 'UDP'.

-proto={ICMP | IGMP | TCP | UDP | GRE | ESP | AH | ICMPV6 | OSPF | MTP | L2TP | SCTP | ALL | <0...256>}

Protocol to block/unblock.

 

-remove

Remove entry from blacklist. (Admin only)

-show={BLACKLIST | WHITELIST | ALL}

Show either blacklist,whitelist or both.

-srciface=<Interface>

Source Interface to block/unblock.

-srcip=<ip address>

Source IP address to block/unblock.

-timeout=<number>

Time in seconds that the host will remain blocked. (Default: 0)

Options

-poll

Show statistics related to polling crypto devices.

-session

Show statistics related to crypto device sessions.

-show

Show specified information.

-status

Show status of available crypto devices.

-verbose

Show detailed information.

Options

-list

Show enabled interfaces.

-release

Release lease on an interface that is no longer needed.

-renew

Renew lease on an interface manually.

-snoop={ON | OFF}

Show troubleshooting messages on the DHCP negotiation.

-verbose

Show extended snoop output.

<interface>

Interface.

Options

-blacklist

Show DHCP server blacklsted address per rule.

-fromentry=<Integer>

Shows DHCP Server lease list from offset <n>. (Default: 1)

-information

Show DHCP server general information.

-interface=<interface>

Interface.

-ip=<IP address>

IP address.

-leases

Show DHCP server leases.

-mappings

Show DHCP server IP mappings.

-num=<Integer>

Limit list to <n> leases. (Default: 20)

-releaseblacklist

Release one or all blacklisted addresses per rule. (Admin only)

-releasemappings

Release one or all address mappings per rule. (Admin only)

-rule=<DHCP Server Rule>

Specify DHCP Server Rule with the name <n>. All rules will be included if this option is not set.

-rules

Show DHCP server rules.

-snoop={ON | OFF}

Show troubleshooting messages on the DHCP Server Rule.

-statistics

Show DHCP server statistics.

Options

-flush

Remove cache entries. (Admin only)

-list

List cache entries.

-num={ALL | <n>}

Limit display to <n> entries. (Default: 20)

-type={A | AAAA | PTR}

Query type.

<String>

Name.

Options

-all

All DNS sessions.

-clientip=<IP range>

Match client IP address.

-close

Close DNS sessions.

-destiface=<Interface>

Filter on destination interface.

-ip=<IP range>

Match client or server IP address.

-num={ALL | <n>}

Limit display to <n> entries. (Default: 20)

-profile=<DNS ALG Profile>

Profile to snoop on.

-serverip=<IP range>

Match server IP address.

-session=<Integer>

DNS session ID.

-show

Show DNS sessions handled by the ALG.

-snoop={ON | OFF}

Enable/Disable snoooping on the DNS ALG.

-srciface=<Interface>

Filter on source interface.

T

Tag Flow - Flow has 'tag' set

g

Agnostic Flow - Flow is forwarding traffic independently of the HA state

P

HA Private Flow - Flow is not synchronized to its HA peer since it is local to this node

R

Reject Flow - Flow is a reject flow and will not forward any traffic

!

Defunct Flow - Flow is broken; something (usually ARP/NDP resolve) went wrong and the flow is silently dropping packets

?

Optimistic Flow - Flow is is being forwarded to the last known destination, though the last update had some minor issues (typically ARP/NDP failed to resolve)

*

Maintenance - Flow is in maintenance mode; packets will be buffered until maintenance is done

A

ARP/NDP resolve in progress - Flow is currently trying to resolve the HW destination using ARP/NDP

Z

Zombie - Flow is closed and awaits being removed; it cannot be used to forward any packets

O

AppControl - Flow is classified and offloaded from the appcontrol engine

Options

-all

Mark all flows.

-app

Show the application using the flow. If -verbose is specified the whole application path is shown.

-appfilter=<String>

Show only flows matching a given application pattern.

-close

Close all flows that match the filter expression. (Admin only)

-compact

Show reduced version of the table. If -verbose is specified the values are separated for each flow direction.

-deepflush

Removes any flow setup optimization states. (Admin only)

-destiface=<Interface>

Filter on destination interface.

-destip=<ip addr>

Filter on destination IP address.

-destport=<port>

Show only given destination TCP/UDP port.

-disable-progress-updates

Prevents the command from showing its progress, even if the command takes a long time to complete. Can be helpful if the output is to be automatically processed.

-ha

Include HA information about the displayed flows.

-hainfo

Show troubleshooting information for flow HA synchronization.

-hastate={NOTSYNCED | SYNCING | SYNCED | SYNCFAILED | DONTSYNC}

Filter on HA state.

-idle

Filter on idle flows. (Advanced view)

-mtu

Show path MTU used by the flow. If -verbose is specified the values are separated for each flow direction.

-num=<n>

Limit list to <n> flows. (Default: 20)

-pipe=<Pipe>

Filter on pipe object.

-pipechain

Show pipe chain used by flow.

-protocol={TCP | UDP | ICMP | ICMPV6 | IGMP | GRE | ESP | SCTP | <name/num>}

Show only given IP protocol.

 

-retag

Invert tag on flows matching filter. (Advanced view)

-rules

Show rules associated with each flow. (Admin only)

-sequence

Show PMU sequence. (Admin only)

-sequence-info

Show PMU sequence with extended information from the PMUs. (Admin only)

-show

Show flows.

-srciface=<Interface>

Filter on source interface.

-srcip=<ip addr>

Filter on source IP address.

-srcport=<port>

Show only given source TCP/UDP port.

-state

Show the state of the flow instead of the protocol. For flows with no particular state the protocol will be shown as state.

-tag

Set tag on flows matching filter. (Advanced view)

-tagged

Filter on flows with tag set. (Advanced view)

-untag

Clear tag on flows matching filter. (Advanced view)

-untagged

Filter on flows with tag unset. (Advanced view)

-usage

Show flow usage statistics. If -verbose is specified the values are separated for each flow direction.

-verbose

Verbose (more information).

Options

-all

All FTP sessions.

-clientip=<IP range>

Match client IP address.

-close

Close FTP sessions.

-destiface=<Interface>

Filter on destination interface.

-ip=<IP range>

Match client or server IP address.

-num={ALL | <n>}

Limit display to <n> entries. (Default: 20)

-profile=<FTP ALG Profile>

Profile to snoop on.

-serverip=<IP range>

Match server IP address.

-session=<Integer>

FTP session ID.

-show

Show FTP sessions handled by the ALG.

-snoop={ON | OFF}

Enable/Disable snoooping on the FTP ALG.

-srciface=<Interface>

Filter on source interface.

Options

-activate=<String>

Activate a geolocation database file. (Advanced view; Matching: *.bin)

-lookup=<IP>

Get geographical information for a set of IP addresses.

-remove=<String>

Remove geolocation database files from storage. (Advanced view; Matching: *.bin)

-status

Display status of geolocation databases.

Options

-enduseraddress=<IPAddress>

Filter on end user address.

-ggsn

List active GGSN connections.

-ggsnip=<IPAddress>

Filter on GGSN IP.

-iface=<GTPTunnel>

Filter on GTP interface.

-listen

List listening GGSN connections.

-localendpoint=<IPAddress>

Filter on local endpoint.

-localip=<IPAddress>

Filter on local IP.

-num={ALL | <Integer>}

Maximum number of entries to show. (Default: 40)

-pdp

List PDP contexts.

-remoteendpoint=<IPAddress>

Filter on remote endpoint.

-verbose

Verbose information.

Options

-all

All GTP sessions.

-apn=<String>

Match the APN.

-close

Close GTP Sessions.

-control

Match control plane (GTP-C) sessions.

-eua=<IP range>

Match the end-user address.

-imei=<String>

Match the IMEI.

-imsi=<String>

Match the IMSI.

-msisdn=<String>

Match the MSISDN.

-num={ALL | <n>}

Limit display to <n> entries. (Default: 20)

-origiface=<Interface>

Filter on originating interface.

-origip=<IP range>

Match originating IP address.

-origteid=<Integer>

Match the originating Tunnel Endpoint Identifier (TEID).

-profile=<GTP Inspection Profile>

Filter on profile.

-session=<Integer>

Match the session id.

-show={BRIEF | FULL}

Show GTP-C/GTP-U sessions handled by GTP Inspection.

-snoop={FULL | BRIEF | OFF}

Enable/Disable GTP message snooping.

-state={PENDING | ESTABLISHED | BOTH}

Match the session state.

-termiface=<Interface>

Filter on terminating interface.

-termip=<IP range>

Match terminating IP address.

-termteid=<Integer>

Match the terminating Tunnel Endpoint Identifier (TEID).

-user

User plane (GTP-U) sessions.

-version={GTPV1 | GTPV2}

Match the GTP-C version.

Options

-activate

Request that this HA node will become the active one. (Admin only)

-compconf

Executed on any HA node with the purpose of manually comparing the configuration to its HA peer's configuration. (Admin only)

-deactivate

Request that this HA node will become the inactive one. (Admin only)

-force

Force requested behavior.

-internal

Show internal HA status that might be required for technical support.

-local

Local HA node. (Admin only)

-module

Show info about modules using HA.

-peer

Remote HA node. (Admin only)

-reboot

Request that the specified HA node reboots. If used with -sendconf or -recvconf, the node receiving the configuration will reboot and use the new configuration at boot-up. (Admin only)

-recvconf

Executed on any HA node with the purpose of manually synchronizing the configuration from its HA peer. The configuration is downloaded from the peer and activated and committed. (Admin only)

-sendconf

Executed on any HA node with the purpose of manually synchronizing the configuration to its HA peer. The configuration is uploaded to the peer and activated and committed. (Admin only)

-status

Show the HA status of the system.

Options

-sensorlist

Show available system sensors.

-show

Show monitor information.

-techsupport={DEVICESENSORS | IPMISTATUS}

Show internal technical support information.

<String>

Shows information on specific monitor.

Options

-allindepth

Show details of all interfaces.

-device=<hardware port>

EthernetDevice name. (Advanced view)

-devicescan

Scan for currently available devices. (Admin only; Advanced view)

-down

Stop the interface (Ethernet interfaces only). (Admin only)

-num={ALL | <Integer>}

Maximum number of entries to show. (Default: 40)

-per-queue-stats

Include hardware statistics per queue (not supported by all Ethernet interface types and might show just zeros).

-type={ALL | CORE | NULL | ETHERNET | IPSEC | GRE | GTP | VLAN | SSLVPN | LAG | IFACEGROUP | ZONE}

Filter interface type. (Default: ethernet)

 

 

-up

Start the interface (Ethernet interfaces only). (Admin only)

<interface>

Interface name.

Options

-active=<Integer>

Maximum number of active negotiations.

-certflush

Flush certificate cache.

-certshow

Show certificate cache.

-clone=<Integer Range>

Specifies the clone range. (Default: 0)

-connect

Initiate an IKE negotiation. (Admin only)

-delete

Delete an existing IKE SA. (Admin only)

-excl

Exclude IKE SA matching the filter. (Advanced view)

-force

Force deletion without sending notification to peer.

-id=<Integer>

Filter on IKE ID.

-ippool

Show IP pool information.

-issuer=<String>

Filter certificates by issuer.

-jobs

Show the job load on the IKE daemon.

-localaddress=<IP range>

Filter on local address used inside tunnel. (Advanced view)

-localendpoint=<IP range>

Filter on local endpoint.

-num={ALL | <Integer>}

Maximum number of entries to show. (Default: 40)

-numchild={ALL | <Integer>}

Maximum number of IPSec child SA to show (default: 0 in verbose mode, all in normal mode). (Advanced view)

-order={ASC | DESC}

Order to sort entries in. (Default: asc)

-recviface[=<Interface>]

Filter on receive interface. (Default: any)

-rekey={IKE | IPSEC}

Rekey an existing IKE/IPsec SA. (Admin only)

-remoteaddress=<IP range>

Filter on remote address used inside tunnel. (Advanced view)

-remoteendpoint=<IP range>

Filter on remote endpoint.

-routingtable=<Routing Table>

Filter on routing table used for outbound IKE messages. If not specified, routing table membership of the receive interface will be used.

-show

Show all IKE SAs.

-snoop={BRIEF | FULL | OFF}

Enable/Disable IKE message snoooping.

-sort={NONE | ID | NAME | LOCALADDRESS | REMOTEADDRESS | LOCALENDPOINT | REMOTEENDPOINT}

Key to sort entries by. (Default: id)

 

-stat

Show IKE statistics.

-state={CREATED | CONNECTING | ESTABLISHED | PASSIVE | REKEYING | DELETING | DESTROYING}

Restrict operation(s) to IKE SA in given state. (Advanced view)

 

-static

Show static IP pool information.

-strict

Filter certificates using strict sub part matching.

-subject=<String>

Filter certificates by subject.

-tunnel=<IPsecTunnel>

Filter on tunnel interface.

-type={ANY | CERT | CRL}

Type of certificate.

-verbose

Verbose information.

Options

-cpu

Sort output on CPU.

-quiet

Run the command to define the start of a new sampling interval but discard the output.

Options

-activate

Activate IPS signature file.

-num=<number>

Limit output to <n> entries. (Default: 20)

-remove

Remove an active IPS signature file from the media.

-show={RULE | SIGNATURE | CATEGORY | GROUP | FILEWARNINGS | FILE}

Show signatures by rule, group, category or signature id.

-verbose

Show extended output, i.e. individual signatures.

<Category>

Signature Category (wildcards * and ? allowed).

<Filename>

IPS signature file (still not activated).

<Filename>

IPS signature file (activated).

<Group>

Signature Group name.

<Rule>

IPS rule name.

<Signature ID>

IPS Signature ID.

Options

-excl

Exclude tunnels matching the filter. (Advanced view)

-localaddress=<IP range>

Filter on local address inside tunnel. (Advanced view)

-localendpoint=<IP range>

Filter on local endpoint.

-num[=<Integer>]

Maximum number of entries to show. (Default: 40)

-remoteaddress=<IP range>

Filter on remote address inside tunnel. (Advanced view)

-remoteendpoint=<IP range>

Filter on remote endpoint.

-show={SAD | SPD | TUNNELS}

Show IPsec SAD/SPD.

-spi=<Integer>

Filter on SPI.

-tunnel=<IPsecTunnel>

Filter on tunnel interface.

-verbose

Verbose information.

Options

-iface=<recv iface>

IPsec interface to show information about.

-num={ALL | <Integer>}

Maximum number of entries to show. (Default: 40)

Options

-backlight={OFF | ON}

Set state of LCD back light.

-clear

Clear LCD display.

-down

Simulate down from the keypad.

-goto

Move cursor on LCD display.

-left

Simulate left from the keypad.

-right

Simulate right from the keypad.

-statusled={OFF | ON | BLUE/GREEN | RED | BLINK | BLINK-GREEN-OFF | BLINK-RED-OFF | BLINK-RED-GREEN}

Set state of the status LED.

-text

Write text to LCD display.

-up

Simulate up from the keypad.

-x=<X>

X-coordinate.

-y=<Y>

Y-coordinate.

<String>

Text.

Options

-detailed

Include extra information in the output.

-limit=<Integer>

Show only categories with memory usage above this limit in KB. (Default: 10)

-proc

Show memory usage per process.

-unit={KB | MB | GB}

Memory unit.

-verbose

Show memory usage per main category.

Options

-externalip=<IP>

External (translated) IP.

-externalport=<port number>

Deterministic reverse mapping. External port to map from.

-internalip=<IP>

Internal IP.

-num=<n>

Limit list to <n> entries. (Default: 20)

-reverse

Performs a reverse map based on the deterministic NAT Pool parameters.

-verbose

Show extended information on deterministic NAT Pool.

<pool name>

NAT Pool name.

Options

-flush

Flush ND cache of all specified interfaces. (Admin only)

-hwsender=<String>

Sender ethernet address.

-ip=<IP address>

IP address to send gratuitous IP for.

-iprange=<IP range>

Show/Flush only IP addresses in range.

-notify

Send gratuitous ND for <ip>.

-num=<n>

Show only the first <n> entries per interface. (Default: 20)

-releasedns

Remove DNS servers learned through SLAAC from the table of all specified interfaces. (Admin only)

-releaserouter

Remove specified routers from the table of all specified interfaces. (Admin only)

-renew

Send router solicitation.

-show

Show ND entries for given interface(s).

-state={ALL | DYNAMIC | NORMAL | STALE | UNRESOLVED | CRYPTO | STATIC | PUBLISH | XPUBLISH}

Specifies a category of neighbor entries, only valid for -type=Neighbor. (Default: dynamic)

 

-type={NEIGHBOR | ROUTER | DNSSERVER}

Specifies what type of ND data to operate on. (Default: Neighbor)

<interface>

Interface name.

<String>

Specifies IPv6 router.

Options

-type={NEIGHBOR | ROUTER | ANY}

Type of NDP traffic.

-verbose

Verbose.

<Network>

Network filter. (Default: ::/0)

{ALL | NONE | <interface>}

Interface name.

Options

-num=<num>

Number of entries to show. Default number of printed objects depends on screen row count. (Default: 0)

-verbose

Verbose.

<IP>

Address/address folder name.

Options

-area

Show area information.

-database

Show the LSA database.

-execute={STOP | START | RESTART}

Start/stop/restart OSPF process. (Admin only)

-iface

Show interface information.

-ifacedown

Take specified interface offline. (Admin only)

-ifaceup

Take specified interface online. (Admin only)

-lsa

Show details for a specified LSA <lsaID>.

-neighbor

Show neighbor information.

-process=<OSPF Router Process>

Specify OSPF router process.

-route

Show the internal OSPF process routingtable.

-snoop={ON | OFF}

Show troubleshooting messages on the console.

-verbose

Increase amount of information to display.

<interface>

OSPF enabled interface.

<lsaID>

LSA ID.

<OSPF Area>

OSPF Area.

<OSPF Neighbor>

Neighbor.

{HA | ALT}

Show HA routingtable.

Options

-average

Show information (average and total) since last reset.

-group=<String>

Show info about this specific group.

-grouping

Show dynamic limits and group info.

-num=<n>

Limit list to <n> pipes. (Default: 20)

-reset

Reset statistics. (Admin only; Advanced view)

-statistics={ENABLE | DISABLE | RESET}

Enable/Disable statistics for group(s) pipe must have been configured with per-group statistic support. (Admin only)

<Pipe>

Display specific pipe.

Options

-destip=<ip addr>

Destination IP address.

-port=<1...65535>

Port number.

-srcip=<ip addr>

Source IP address.

Options

-off

Turn RADIUS snooping off.

-on

Turn RADIUS snooping on.

-server=<RADIUS Server>

Name of configured RADIUS Server to snoop on.

-user=<String>

Username to snoop on. Wildcard strings are supported.

-verbose

Enable RADIUS snooping with verbose output.

Options

-forcedisable

Force disable route.

-forceenable

Force enable route.

-show

Show monitored routes.

-verbose

Show verbose information.

<Integer>

Route monitor session ID.

-

Contents of a (named) routing table.

-

The list of routing tables, along with a total count of route entries in each table, as well as how many of the entries are single-host routes.

A

Published via Proxy ARP

B

Learned via BGP

D

Dynamic (from e.g. DHCP relay, IPsec, L2TP/PPP servers, etc.)

H

HA synced from cluster peer

L

Local IP

M

Route is Monitored

O

Learned via OSPF

S

Route is stale (pending update)

P

HA Private

X

Route is Disabled

Z

Route is being updated

Options

-alltypes

Also show routes for interface addresses.

-lookup=<ip address>

Lookup the route for the given IP address.

-nonhost

Do not show single-host routes.

-num={ALL | <n>}

Limit display to <n> entries. (Default: 20)

-rawdb

Show results from slowpath routing tables. (Advanced view)

-show

Show routes in routing table.

-tables

Display list of named routing tables.

-verbose

Verbose.

<table name>

Name of routing table.

{<ALL> | <table name>}

Name of routing table.

Options

-num=<n>

Limit list to <n> rules. (Default: 40)

-type={IP | ACCESS | PBR}

Type of rules to display. (Default: IP)

-verbose

Verbose: show all parameters of the rules.

<rules>

Range of rules to display. (default: all rules)

Options

-ratelim=<1...65535>

Ratelimit; rule operations snooped per second. (Default: 1)

-verbosity={BASIC | INFORMATIVE | EXTREME}

Verbosity level. The higher level, the more information is output about the lookup decisions. Each higher level will include output from the lower levels as well. (Default: basic)

<destination>

Destination network filter.

<source>

Source network filter.

{ALL | CORE | NONE | <interface>}

Name of receive interface.

Options

-all

Close all SCTP associations. (Admin only)

-close

Close an SCTP association. (Admin only)

-compact

Show reduced version of the table.

-initif=<Interface>

Receive Interface of the initiator of an SCTP association.

-initip=<ip address>

IP address of the initiator of an SCTP association.

-initport=<port>

Port of the initiator of the SCTP association.

-linger

Also display deleted associations lingering in the wait queue.

-num=<number>

Limit output to <n> entries. (Default: 10)

-respif=<Interface>

Receive Interface of the responder of an SCTP association.

-respip=<ip address>

IP address of the responder of an SCTP association.

-respport=<port>

Port of the responder of the SCTP association.

-show

Show SCTP associations.

-showalias

Show also the aliases of an association.

-showvtag

Display the verification tags used by the peers of an association.

-state={INIT | INIT-ACK | COOKIE-ECHO | ESTABLISHED | SHUTDOWN | SHUTDOWN-WAIT}

State in which an association should be in order to be displayed.

 

-vtag=<String>

Verification tag used by either the initiator or the responder of an association to filter on.

-

0x00000001 GENERAL

-

0x00000002 ERRORS

-

0x00000004 OPTIONS

-

0x00000008 PARSE

-

0x00000010 VALIDATE

-

0x00000020 SDP

-

0x00000040 ALLOW_CHANGES

-

0x00000080 SUPPORTED_CHANGES

-

0x00000100 2543COMPLIANCE

-

0x00000200 RECEPTION

-

0x00000400 SESSION

-

0x00000800 REQUEST

-

0x00001000 RESPONSE

-

0x00002000 TOPO_CHANGES

-

0x00004000 MEDIA

-

0x00008000 CONTACT

-

0x00010000 CONN

-

0x00020000 PING

-

0x00040000 TRANSACTION

-

0x00080000 CALLLEG

-

0x00100000 REGISTRY

Options

-call

Show active calls table.

-compact

Show compact version of the table.

-connection

Show SIP connections.

-definition

Show running ALG configuration parameters.

-flags=<String>

SIP snooping for certain levels. Expected number in hexadecimal notation.

-iface=<Interface>

Filter on interface.

-index=<number>

Show only <index> entry. (Default: 0)

-ip=<ip address>

Filter on IP address.

-num=<number>

Limit output to <n> entries. (Default: 20)

-registration[={SHOW | FLUSH}]

Show or flush registration table. (Default: show)

-session

Show active SIP sessions.

-snoop={ON | OFF | VERBOSE}

Enable or disable SIP snooping. NOTE: 'verbose' option outputs a lot of information on the console which may lead to system instability. Use with caution. (Admin only)

-sort-column=<number>

Sort the table by the specified column.

-statistics[={SHOW | FLUSH}]

Show or flush SIP counters. (Default: show)

-user=<String>

Filter on user name.

<ALG>

SIP-ALG name.

Options

-all

All SSLVPN sessions.

-assignedip=<IP range>

Filter on IP address assigned to client.

-close

Close SSLVPN sessions.

-localip=<IP range>

Filter on local endpoint IP address.

-nohalt

Do not send a halt message to the SSLVPN client when a session is about to be closed.

-num={ALL | <n>}

Limit display to <n> entries. (Default: 20)

-recviface[=<Interface>]

Filter on receive interface. (Default: any)

-rekey

Trigger key renegotiation for connected SSLVPN sessions.

-remoteip=<IP range>

Filter on remote endpoint IP address.

-remoteport=<Integer Range>

Filter on remote TCP/UDP port by specifying a number or range.

-show

Show SSLVPN sessions.

-snoop={OFF | BRIEF | FULL}

Enable/Disable snooping of an SSLVPN interface.

-state={CONNECTED | CONNECTING}

Filter on session state.

<tunneliface>

SSLVPN tunnel interface.

Options

-add

Add statistical values to the list of polled values.

-diff-counters

For counter based values; show the difference compared to the local snapshot instead of the real value.

-format={HUMAN | RAW}

Controls the formatting of the output.

-get

Directly display values of statistical counters.

-human

Output values in a human readable format, for instance, by using a prefix to the unit such as k (kilo), Ki (kibi), M (mega), Mi (mebi) etc. Short form of -format=human.

-interval=<interval>

Number of seconds between polls. (Default: 0)

-listall

List available statistical values.

-listpolled

Show the poll list.

-nonzero

Only include non-zero values in the output.

-numdigits=<1...10>

Number of digits to strive for when doing human readable formatting.

-poll

Poll values.

-quiet

Poll values, but supress normal output. Useful to fetch baseline values for rate or difference calculations.

-rate[={COUNTERS | MAX | MIN | MOMENTARY | NUMERIC}]

Show average rate since last poll, per default, for counter based values only. (Default: counters)

-remove

Remove statistical values from the list of polled values.

-snapshot-counters

Create (or update) the local snapshot of counter based values.

-stop

Stop interval polling of statistical values.

-timefmt={DECIMAL | UNITS}

Controls how values representing time are formatted, when doing human readable formatting.

-transferrate={BITS | BYTES}

Controls which unit that is used for the rate of byte counters representing transferred data; bits per second (default) or bytes per second. This option only applies to human readable formatting.

-verbose

Show value update info in the output.

<value>

Single statistical value or a group of values.

<values>

Comma separated list of statistical values or a group of values.

Options

-allocate

Allocate memory.

-cat=<1...2>

Category to use for allocations. (Default: 1)

-diff

Allocate from different location.

-fastexit

Exit application now.

-free

Free memory.

-id=<Integer>

Index to free.

-killme

Exit application.

-list

List memory consumption.

-memleak

Dont free allocations.

-num=<Integer>

Number of objects to allocate. (Default: 1)

-size=<Integer>

Size of object to allocate. (Default: 1)

-start

Start allocate thread.

-stop

Stop allocate thread.

-track

Print memory allocations.

-type={CHAR | UINT}

Variable type. (Default: char)

-usedMem

Memory used by testmem.

-z

Two allocate threads.

Group Limit

The effective limit per group. It is only relevant when the threshold has been configured with "shared scope", otherwise it will just be the configured limit.

Max Current

The largest value measured by any group. The currently largest value, it's not a historical value. When this group violates the threshold condition(s), the time that it has been violating the threshold condition will also be displayed. E.g. 501/3.03s, meaning 501 concurrent flows(or flows/s) measured, and this measurement has violated (exceeded) the configured threshold for 3.03s.

Active Groups

The number of groups that are considered "active".

Exceeding Groups

Those (active) groups that are violating the configured threshold condition(s). Exceeding groups are thus a subset of the Active Groups.

NOTE:

When "flow rate" is configured, any group with at least 1 flow setup attempt per configured interval (normally 1s), is considered to be an "active group". When "concurrent flows" is configured, any group with at least 1 open flow, is considered to be an "active group".

Duration

When a group has never violated the corresponding threshold definition(s), it will display the time that the group has been "active". If the group currently violates the threshold definition(s), it is the time that the group has been violating the threshold definition(s).

In simple words it shows the time the group is in the current state (how long has it been violating the threshold, how long since it stopped violating the threshold, how long has it been active).

Options

-grouping

Show dynamic limits and group info for threshold rule(s).

-num=<n>

Limit output to <n> rows/entries. (Default: 20)

-reset

Reset group state; active groups will be recreated without history. (Admin only; Advanced view)

-show

Show threshold state.

-threshold=<String>

Restrict command to this specific threshold definition.

<rule>

Specific threshold rule.