Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

show session limit parameter

Displays detailed session limit parameter information.

show session limit parameter [ global | parameter-name]
global
Specifies the global session limit parameters.
parameter-name
The name of a configured system session limit parameter.

Operational mode

Use the show session limit parameter command to display detailed information about the global session limit parameters or a specific system session limit parameter.

The show session limit parameter command displays the following information.

Table 1. Session limit parameter information
Output field Description
Sessions allowed Total number of sessions allowed.
Sessions blocked Total number of sessions blocked (sum of rate-limit sessions blocked and max-halfopen sessions blocked)
Current session counts Number of current established, half-open, and terminating sessions that matched rules assigned to this session.
Max session counts Maximum values of session counts since the last counter reset.
Time since last session created Time since the last session was created.
Sessions per second average Session per-second rates averaged over the last one second, one minute, and five minutes.
Max sessions per second Highest value of sessions per-second rates since the last counter reset.
Time since max sessions per sec Time since the Max sessions per second value occurred.
Time since last session blocked Time since the last session was blocked.
Max sessions blocked per sec avg Highest values of Sessions per second average.
Features Features enabled on the session policy (rate-limit, max-halfopen).
Rate sessions/second Rate-limit feature maximum sessions per second since configuration time.
Max burst Rate-limit feature maximum burst of sessions created since configuration time.
Interval (milliseconds) Rate-limit interval derived from the configured rate and burst values.
Sessions blocked Sessions blocked due to the rate-limit rate being exceeded.
Max halfopen maximum Max-halfopen sessions limit. After the number of halfopen sessions reaches this value, no further sessions are created.
Sessions blocked Sessions blocked due to the max-halfopen value being exceeded.

The following example shows how to display detailed session limit parameter information.


vyatta@R1# show session limit parameter PARAM1
Session limit parameter "PARAM1":
    Sessions allowed                                                               111
    Sessions blocked                                                               189
    Current session counts (estab/half-open/terminating)                       [0:0:0]
    Max session counts (estab/half-open/terminating)                          [0:74:0]
    Time since last session created                                               1.9m
    Sessions per sec avg (1sec/1min/5mins)                                     [0:0:0]
    Max sessions per sec avg (1sec/1min/5mins)                                 [4:0:0]
    Time since max sessions per sec (1sec/1min/5mins)               [1.9m:never:never]
    Time since last session blocked                                               1.9m
    Max sessions blocked per sec avg (1sec/1min/5mins)                         [7:0:0]
    Features                                                                rate-limit
    Rate limit                                            
        Rate sessions/second                                                         4
        Max burst                                                                    4
        Interval (milliseconds)                                                   1000
        Sessions blocked                                                           189

Session limit group "GROUP1":
    Active on (dp0p1s1)
    rule    parameter  proto           allowed         blocked        
    ----    ---------  -----           -------         -------        
    10      PARAM1     udp             37              63             
    condition - proto udp 

    20      PARAM1     tcp             37              63             
    condition - proto tcp 

    30      PARAM1     icmp            37              63             
    condition - proto icmp