topic Re: Interface &quot;attack&quot; counters in General Topics https://live.paloaltonetworks.com/t5/general-topics/interface-quot-attack-quot-counters/m-p/10921#M8054 <HTML><HEAD></HEAD><BODY><P>Yes its related to the zone protection settings:</P><P></P><P>show zone-protection {zone &lt;zone_name&gt;}</P><P></P><P>Displays the running configuration status and run time statistics for zone protection elements. For more </P><P>information, refer to the “Network Configuration” chapter in the Palo Alto Networks Administrator’s </P><P>Guide.</P></BODY></HTML> Wed, 12 Dec 2012 13:06:22 GMT mikand 2012-12-12T13:06:22Z Interface "attack" counters https://live.paloaltonetworks.com/t5/general-topics/interface-quot-attack-quot-counters/m-p/10920#M8053 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>With the command "show counter interface ethernet1/X" i see several counters related to different kinds of "attacks".</P><P></P><TABLE height="120" style="width: 202px;"><TBODY><TR><TD>land attacks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </TD><TD></TD></TR><TR><TD>ping-of-death attacks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </TD><TD></TD></TR><TR><TD>teardrop attacks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </TD><TD></TD></TR><TR><TD>ip spoof attacks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </TD><TD></TD></TR><TR><TD>mac spoof attacks&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </TD><TD></TD></TR></TBODY></TABLE><P></P><P>I'm unable to find documentation or a description on what these counters are, and how the different kids of attacks are detected.</P><P>Are these counters also somehow linked to the Zone/Dos Protection feature?</P></BODY></HTML> Wed, 12 Dec 2012 10:14:47 GMT https://live.paloaltonetworks.com/t5/general-topics/interface-quot-attack-quot-counters/m-p/10920#M8053 torm 2012-12-12T10:14:47Z Re: Interface "attack" counters https://live.paloaltonetworks.com/t5/general-topics/interface-quot-attack-quot-counters/m-p/10921#M8054 <HTML><HEAD></HEAD><BODY><P>Yes its related to the zone protection settings:</P><P></P><P>show zone-protection {zone &lt;zone_name&gt;}</P><P></P><P>Displays the running configuration status and run time statistics for zone protection elements. For more </P><P>information, refer to the “Network Configuration” chapter in the Palo Alto Networks Administrator’s </P><P>Guide.</P></BODY></HTML> Wed, 12 Dec 2012 13:06:22 GMT https://live.paloaltonetworks.com/t5/general-topics/interface-quot-attack-quot-counters/m-p/10921#M8054 mikand 2012-12-12T13:06:22Z