[j-nsp] Command to show filter hit statistics?

[Niels Bakker]

Sure, try this:

---
firewall {
    family inet {
        filter acl90 {
            term 10 {
                from {
                    source-address {
                        157.22.0.0/16;
                     }
                }
                then {
                    count term10;
                    accept;
                }
            }
            term 20 {
                [..repeat for your other IP prefixes..]
            }
            term end {
                then {
                    count rejected;
                    discard;
                 }
            }
        }
    }
}
---

then run "show firewall filter acl90" to see the bytes and packet
counters.


	-- Niels.

--