The show sbcfg command displays various datapath configuration. This command has no parameters.
Syntax:
show sbcfg
Sample Output:
IntruDebug#> show sbcfg
IP CFG
IPFragmentTimer 30
OverlapOption OLD_DATA
TTLConfigMode NO_TTL_CHECKING
TTLThreshold 32
TTLResetValue 32
SmallestFragmentSize 256
SmallestFragmentThreshold 10000
IP Fragment Reassembly ENABLE
IPV6OverlapOption OLD_DATA
IPV6SmallestFragmentSize 48
IPV6SmallestFragmentThreshold 10000
TCP CFG
SupportedUDPFlows 100000
TCBInactivityTimer 10
TCPSegmentTimer 60
TCP2MSLTimer 10
InactiveFlowRstEnabled 2
DropReTxTCPEnabled 2
ColdStartTime 60
ColdStartDropAction FORWARD_FLOWS
NormalizationOnOffOption OFF
TcpOverlapOption NEW_DATA
SynAckPermittedOption 1
TCPOptionThreshold 100
DropOnPAWSFail ENABLE
TimeStampEchoMatchFail ENABLE
DropMD5Option ENABLE
UnsolicitedUDPPktsTimeout 60
SynProxyEnable DISABLE
AckScanDiscardTime 15
HalfOpenConnResetEnable RST_3WH_DISABLE
OutOfContextTcpPktEnable PERMIT_OUT_OF_ORDER
synCookieConfig Inbound-DISABLE Outbound-DISABLE
synCookieInboundThreshold 102400
synCookieOutboundThreshold 102400
synCookieMss 536
Tcpudpicmpchecksumerror Drop
flow volume threshold is 0MB.
DNSRedirectConfig disabled
Syn Cookie TCP Reset Send Enable status : Enabled (1)
DNS sinkhole TTL 720
DNS sinkhole IP 127.0.0.1
Oversubscription value: 0
BackendLimit Value: 0x1c2002d
INTF PORT 0
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 1
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 2
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 3
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 4
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 5
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 6
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 7
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 8
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 9
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 10
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 11
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 12
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 13
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 14
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 15
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 16
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 17
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 18
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 19
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 20
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 21
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 22
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 23
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 24
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 25
OperatingMode INLINE_FAIL_CLOSED
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 1
INTF PORT 26
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 27
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 28
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 29
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 30
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 31
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 32
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType INSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
INTF PORT 33
OperatingMode INLINE_FAIL_OPEN
FullDuplex ENABLED
InOutType OUTSIDE
FEC Invalid
Monitoring Port IP - 0.0.0.0
Monitoring Port Netmask - 0.0.0.0
Monitoring Port Gateway - 0.0.0.0
Monitoring Port Vlan ID - 0
Monitoring Port NBAD Config Status - 0
Monitoring Port AppId Stats Alert Config Status - 0
RESP PORT 1
AdminStatus ENABLED
Operational Status : Down
FullDuplex ENABLED
Speed 3
PktDestination SWITCH
ALERT THROTTLE CFG
CorrelationTime 5
PKTLOG CFG
MaxPktsPerFlow 1000
DOS CFG
DosPktLogging DISABLED
FAILOVER CFG
FailoverAction DISABLED
FailoverMode FAILOVER_MODE_STANDALONE
SSL CFG
SessionCacheLifetime 5
SupportAction 0
PktLogging DISABLED
ShKey Decrypt DISABLED
ResponseProcEnable DISABLED
Configured SSL inbound mode 0
Current SSL inbound mode 0
Configured SSL outbound mode 0
Current SSL outbound mode 0
Outbound PktLogging DISABLED
Outbound SessionCacheLifetime : 5
Outbound Unknown Server Certificate : 1
Outbound Untrusted Server Certificate : 3
Outbound Unsupported cipher suite : 1
Outbound Unsupported Server Certificate : 1
Outbound Unknown URL Category : 0
ACL Log Alert CFG
Alert Logging Disabled
DNSPROTECTION IPV4 CFG
No IPv4 DNS Protection IP's are configured
DNSPROTECTION IPV6 CFG
No IPv6 DNS Protection IP's are configured
SENSOR LOAD CFG
Sensor Load Computation is set to off
TUNNELING CFG
Tunneling is disabled
OVERSUBSCRIPTION CFG
Oversubscription level 0
IPS SIMULATION CFG
Ips Simulation is disabled
PKTDROP SYSEVENT CFG
PktDrop sysevent is disabled
IP REASSEMBLY TIMEOUT FORWARD CFG
IP Reassembly timeout forward is disabled
IP Reassembly timeout in milli second is 0
BDD threshold value : 20
BDD threshold value : 20
BDD threshold value for base64-smtp: 0
Max Unknown Port SSL Connections: 0
LDPENDING CFG
LDPENDING CFG is set to actual-load
Miscellaneous CFG
Misc Flags 41216
Mon Port Ping Status : Disabled
Datapath attack detection monitoring : Disabled
IBAC Host Auth Status : Enabled
Sibyte Smpt Load Balancing Status : Disabled
IPS for Unknown UDP is enabled
EZ-LOG-ALERT CFG
EzAlertLogging 5
NBAD CFG
NBAD Sensor IP Address 0.0.0.0
NBAD Sensor Port 0
NBAD IPS Primary Mon Port Id 1
NBAD IPS Secondary Mon Port Id 2
NBAD OS Finger Printing Status 0
NBAD App Finger Printing Status 0
NBAD SSL Flow Data Capture Status 0
NBAD TCP Capture Config : Enabled
NBAD UDP Capture Config : Enabled
NBAD ICMP Capture Config : Disabled
Miscellaneous CFG
TAPA Protocol Config : 0
Latency Monitor Status : 0
Artemis Detection Mode : 1
Malware UD Detection Mode : 1
GTIfilelookup timeout : 6
Overwrite GZIP : 0
Unknown Proto Scan Depth : 256
NAC DHCP Pxe Config : 39321602
L7 DCap Percent Flows : 20
L7 DCap Buffer Size : 1500
Misc Flags 41216
Mon Port Ping Status : Disabled
Datapath attack detection monitoring : Disabled
IBAC Host Auth Status : Enabled
Unknown Proto Scandepth Status : Enabled
Sibyte Smpt Load Balancing Status : Disabled
AppId Stats Alert Status : Enabled
Requested Snort Rule Engine Config : Trellix Snort
Active Snort Rule Engine Config : Trellix Snort
MPE Additional CFG
Number of Additional MPE IP Addresses 0
NAC host tracking configuration
NAC host tracking disabled
Dxl Config
EPO IP4 10.213.169.103
EPO IP6 ::
EPO IP TYPE 4
EPO PORT 8443
EPO Action 3
EPO Username admin
DXL Enable/Disable 1
TIS CFG
IP Address type = 0
TIS Profile/User Name = nsp
TIS Profile/User Id = 2
Applicable to:
NS-series Sensors