Ssl command, bigpipe

From NetworkStuff

A command available on F5 BigIP platforms; used to display or reset system-wide SSL profile statistics.

Usage Syntax

bigpipe ssl [stats reset]

The stats reset option resets the statistics, otherwise the command displays statistics.

Usage Examples

bigpipe ssl - display current system-wide SSL profile statistics

bigpipe tcp stats reset - reset current system-wide TCP statistics

Usage Notes

System-Wide in this case refers to the LTM system and thus the statistics shown only related to traffic dealt with by LTM. In other words, these statistics exclude management traffic and any traffic dealt with solely by the underlying Linux operating system such as ARP, NTP and any traffic that is simply routed through the device.

Client side and server side statistics are displayed separately, however the statistics shown are combined figures for all SSL client or server profiles.

Using command syntax bigpipe ssl is actually executing command: bigpipe ssl stats show all

Bigpipe Usage Notes

From v9.4, be aware of the administrative partition that is currently active; use the bigpipe shell partition command to display the current active partition name and the bigpipe shell partition name command to change partitions.

A full command manual can be displayed using the man command followed by the command name, for example: man pool or by suffixing the command name with the help keyword, for example; bigpipe pool help.

In most cases, the show keyword displays object status or statistics and the list keyword displays configuration. Remember, from v9.4, only objects in the currently active administrative partition will be displayed.

The bigpipe command can be abbreviated to just b (e.g. b help instead of bigpipe help.) Alternatively, (from v9.4,) you can use the bigpipe shell to enter commands without prefixing them with bigpipe.

Where curly or normal brackets {} or () or quotes "" or exclamation mark ! are required as part of a command and you are not using the bigpipe shell, they must be proceeded with a back slash \ to prevent the BASH shell from parsing them as system commands.

Don't forget to save your changes using the bigpipe save all command as necessary.

Typical Output

GLOBAL CLIENT-SIDE SSL STATISTICS
|     conn (cur, max) = (0, 178)
|     native conn (cur, max, tot) = (0, 178, 27502)
|     compat conn (cur, max, tot) = (0, 0, 0)
|     conn (full, assist, none) = (27475, 27, 0)
|     (in, out) = encrypt (328.9M, 3.401G)  decrypt (322.1M, 3.381G)
|     record (in, out, bad) = (96558, 678273, 0)
|     protocol (SSLv2, SSLv3, TLSv1) = (0, 27274, 118)
|     certs (valid, invalid, none) = (0, 0, 27392)
|     cache (curr, lookups, hits) = (834, 27093, 26397)
|     cache (overflow, invalid) = (0, 0)
|     unclean shutdowns = 27504
|     handshakes (mid-stream, error, non-SSL) = (0, 2, 0)
|     fatal alerts = 0

GLOBAL SERVER-SIDE SSL STATISTICS
|     conn (cur, max) = (0, 0)
|     native conn (cur, max, tot) = (0, 0, 0)
|     compat conn (cur, max, tot) = (0, 0, 0)
|     conn (full, assist, none) = (0, 0, 0)
|     (in, out) = encrypt (0, 0)  decrypt (0, 0)
|     record (in, out, bad) = (0, 0, 0)
|     protocol (SSLv2, SSLv3, TLSv1) = (0, 0, 0)
|     certs (valid, invalid, none) = (0, 0, 0)
|     cache (curr, lookups, hits) = (0, 0, 0)
|     cache (overflow, invalid) = (0, 0)
|     unclean shutdowns = 0
|     handshakes (mid-stream, error, non-SSL) = (0, 0, 0)
|     fatal alerts = 0

Related Commands

Use the bigpipe tcp command to display or reset the equivalent TCP statistics

Use the bigpipe udp command to display or reset the equivalent UDP statistics

Use the bigpipe icmp command to display or reset the equivalent ICMP statistics

The bigpipe interface command provides interface level, network layer protocol independent, layer two statistics.

Related Articles

You may be interested in out Viewing F5 BigIP Statistics article

Information on other F5 BigIP commands

Information on Linux commands

Information on Cisco commands

Information on Vyatta commands

Information on Extreme commands

Information on Secure Platform commands

Information on Blue Coat SGOS commands

Information on Nokia IPSO commands

We really do appreciate all feedback so please do send your comments, suggestions or corrections to steve#networkstuff.eu (replacing the # with an @)