Use the CLI commands in this procedure to view detailed file inspection statistics and configuration details. You can view the following:
The command output display statistics for each bot instance that is running.
Note
You can view file inspection statistics only using the CLI.
Prerequisites
Administrator, Operator, Monitor, or Analyst access to the Network Security appliance
Preprocessor configuration
To view the file inspection preprocessor configuration:
Go to CLI enable mode.
hostname > enableView the configuration of the preprocessor.
hostname # show bottracker preprocessor config Bott Instance 0 HTTP Inspect : IOC Config Info Number of URI Feeds : 2 Total No. of URI Entries : 11067 Number of Blacklist Entry : 11040 Number of Alert Entry : 27 Number of Duplicate Entries : 0 Number of Domain Feeds : 4 Total No. of Domain Entries : 548 Number of Blacklist Entry : 541 Number of Alert Entry : 7 Number of Duplicate Entries : 2 Memory Limit Reached : No IP Reputation Config Preprocessor Enabled : Yes Number of Feeds : 6 File Load Error Count : 0 Total Number of Entry : 32 Number of Whitelist Entry : 22 Number of Blacklist Entry : 0 Number of Alert Entry : 10 Number of Duplicate Entry : 11 Number of Invalid Entry : 0 Number of Insert Entry failure: 0 Memory Limit Reached : No File Inspect Config File Inspect Enabled : No Data Path Configuration : Disabled Hash Configured : No MD5 & SHA256 : Enabled Whitelist Domain Config Info Number of Whitelist Domain Feeds : 1 Total No. of Whitelist Entries : 1 Bott Instance 1 HTTP Inspect: IOC Config Info .....
File statistics
To view the detailed file inspection statistics:
Go to CLI enable mode.
hostname > enableView the detailed file inspection statistics.
hostname # show bottracker preprocessor file-inspect statsBott Instance 0 File Inspect Stats Total Files Processed : 0 Number of Signature Callbacks : 0 Number of Pkt Matching Block Action : 0 Number of Pkt Matching Alert Action : 0 Number of Partial Download Request : 0 Number of Partial Req Matching Block Action : 0 Number of Partial Req Matching Alert Action : 0 Number of Partial Req Lookup Failure : 0 Number of Sessions Without File Extraction : 0 .....
IP address statistics
To view the statistics for file inspection based on matched IP addresses:
Go to CLI enable mode.
hostname > enableView the IP address statistics.
hostname # show bottracker preprocessor ip-reputation statsBott Instance 0 IP Reputation Stats Config Index : 1 Number of Pkt Bypass Reputation Process : 0 Number of Pkt Received : 0 Number of Pkt Lookup Failure : 0 Number of Pkt Matching Whitelist Trust Action: 0 Number of Pkt Matching Block Action : 0 Number of Pkt Matching Alert Action : 0 Number of Pkt Matching Source IP : 0 Number of Pkt Matching Dest IP : 0 Number of Pkt Matching Outer Source IP : 0 Number of Matching Outer Dest IP :Bott Instance 1 IP Reputation Stats Config Index: 1 Number of Pkt Bypass Reputation Process: 0 .....
Streamed traffic statistics
To view the statistics for streamed traffic:
Go to CLI enable mode.
hostname > enableView the stream statistics.
hostname # show bottracker preprocessor stream statsBott Instance 0 Stream Session Stats Total TCP Session : 0 Total UDP Session : 0 Total ICMP Session : 0 Total IP Session : 0 Total TCP Prune Session : 0 Total UDP Prune Session : 0 Total ICMP Prune Session : 0 Total IP Prune Session : 0 Total TCP timeout : 0 Total TCP Stream tracker created : 0 Total TCP Stream tracker released : 0 Total TCP Stream Segment created : 0 Total TCP Stream Segment released : 0 Total TCP Stream Segment memory used: 0 Total TCP Rebuild packets : 0 Total TCP Rebuild Seq Used : 0 Total TCP overlaps : 0 Total TCP discard : 0 Total TCP gaps : 0 Total UDP Timeouts : 0 Total UDP Session Created : 0 Total UDP Session release : 0 Total UDP Discard : 0 Total ICMP Timeouts : 0 Total ICMP Session Created : 0 Total ICMP Session release : 0 Total IP Timeouts : 0 Total Events : 0 Total Internal Events : 0 Total TCP session filtered : 0 Total TCP session inspected : 0 Total TCP session tracked : 0 Total UDP session filtered : 0 Total UDP session inspected : 0 Total UDP session tracked : 0
HTTP traffic statistics
To view the statistics for HTTP traffic:
Go to CLI enable mode.
hostname > enableView the HTTP statistics.
hostname # show bottracker preprocessor http statsBott Instance 0 HTTP Inspect Stats Number of Unicode Packets : 0 Number of Double Unicode Packets : 0 Number of non-ascii Characters : 0 Number of POST Request : 0 Number of GET Request : 0 Number of gzip packet Number of Session Created : 0 Number of Session Released : 0 GZIP mempool usage : 0 HTTP mempool usage : 0 HTTP Inspect: IOC URI Stats No. of IOC URI Entries: 11067 Number of IOC Matching Block Action : 0 Number of IOC Matching Alert Action : 0 HTTP Inspect: IOC Domain Stats No. of IOC Domain Entries: 548 Number of IOC Matching Block Action : 0 Number of IOC Matching Alert Action : 0 HTTP Inspect: Whitelist Domain Stats No. of Whitelist Domain Entries : 1 No. of Matching Whitelist Domain : 0
Combined file inspection tatistics
To view combined detailed preprocessor statistics for file inspection:
Go to CLI enable mode.
hostname > enableView all statistics.
hostname # show bottracker preprocessor statsThe command output displays statistics for IP reputation, file inspection, streamed traffic, and HTTP traffic.