Download full document:

ssl

The following operations can be performed on "ssl":

stat ssl

p{white-space: pre-wrap;}

Displays SSL statistics.

Synopsys

stat ssl [-detail] [-fullValues] [-ntimes <positive_integer>] [-logFile <input_filename>] [-clearstats ( basic | full )]

Arguments

detail

Specifies detailed output (including more statistics). The output can be quite voluminous. Without this argument, the output will show only a summary.

fullValues

Specifies that numbers and strings should be displayed in their full form. Without this option, long strings are shortened and large numbers are abbreviated

ntimes

The number of times, in intervals of seven seconds, the statistics should be displayed.

Default value: 1

Minimum value: 0

logFile

The name of the log file to be used as input.

clearstats

Clear the statsistics / counters

Possible values: basic, full

Outputs

Bytes decrypted on the back-end (secondary card) (DecHwBeSecondary)

Number of bytes decrypted on the back-end in hardware on secondary card.

Bytes decrypted on the front-end (secondary card) (DecHwFeSecondary)

Number of bytes decrypted on the front-end in hardware on secondary card.

Bytes encrypted on the back-end (secondary card) (EncHwBeSecondary)

Number of bytes encrypted on the back-end in hardware on secondary card.

Bytes encrypted on the front-end (secondary card) (EncHwFeSecondary)

Number of bytes encrypted on the front-end in hardware on secondary card.

Bytes decrypted (secondary card) (DecHwSecondary)

Number of bytes decrypted in hardware on secondary card.

Bytes encrypted (secondary card) (EncHwSecondary)

Number of bytes encrypted in hardware on secondary card.

Secondary card utilization (%) (SSLCryptoUtilStat2nd)

Utilization of the hardware crypto resource. Only valid values are 0-100%. Only works on N3FIPS+N3 hybrid platform.

SSL crypto utilization (%) (SSLCryptoUtilStat)

Utilization of the hardware crypto resource. Only valid values are 0-100%. Only works on platforms with Nitrox-3 chips.

# Secondary SSL cards UP (SSLCardUPSecondary)

Number of Add on SSL cards that are UP.

# Secondary SSL cards present (SSLCardsSecondary)

Number of secondary SSL crypto cards present on the NetScaler appliance.

# SSL cards UP (SSLCardUP)

Number of SSL cards that are UP. If the number of cards UP is lower than a threshold, a failover is initiated.

SSL crypto card status (SSLCardSt)

Status of the SSL card(s). The value should be interpreted in binary form, with each set bit indicates a card as UP.

# SSL cards present (SSLCards)

Number of SSL crypto cards present on the NetScaler appliance.

SSL engine status (SSLEngSt)

State of the SSL Engine (1=UP/0=DOWN). This state is decided based on SSL Feature/License status and minimum number of cards UP.

SSL sessions (SSLSe)

Number of SSL sessions on the NetScaler appliance.

SSL transactions (SSLTrn)

Number of SSL transactions on the NetScaler appliance.

SSLv2 transactions (SSL2Trn)

Number of SSLv2 transactions on the NetScaler appliance.

SSLv3 transactions (SSL3Trn)

Total number of SSLv3 transactions on the NetScaler appliance.

TLSv1 transactions (TLS1Trn)

Number of TLSv1 transactions on the NetScaler appliance.

TLSv1.1 transactions (TLS11Trn)

Number of TLSv1.1 transactions on the NetScaler appliance.

TLSv1.2 transactions (TLS12Trn)

Number of TLSv1.2 transactions on the NetScaler appliance.

TLSv1.3 transactions (TLS13Trn)

Number of TLSv1.3 transactions on the NetScaler appliance.

SSLv2 sessions (SSL2Se)

Number of SSLv2 sessions on the NetScaler appliance.

SSLv3 sessions (SSL3Se)

Number of SSLv3 sessions on the NetScaler appliance.

TLSv1 sessions (TLS1Se)

Number of TLSv1 sessions on the NetScaler appliance.

TLSv1.1 sessions (TLS11Se)

Number of TLSv1.1 sessions on the NetScaler appliance.

TLSv1.2 sessions (TLS12Se)

Number of TLSv1.2 sessions on the NetScaler appliance.

TLSv1.3 sessions (TLS13Se)

Number of TLSv1.3 sessions on the NetScaler appliance.

new SSL sessions (NewSe)

Number of new SSL sessions created on the NetScaler appliance.

SSL session misses (SeMiss)

Number of SSL session reuse misses on the NetScaler appliance.

SSL session hits (SeHit)

Number of SSL session reuse hits on the NetScaler appliance.

SSL sessions (BSSLSe)

Number of back-end SSL sessions on the NetScaler appliance.

SSLv3 sessions (BSSL3Se)

Number of back-end SSLv3 sessions on the NetScaler appliance.

TLSv1 sessions (BTLS1Se)

Number of back-end TLSv1 sessions on the NetScaler appliance.

TLSv1.1 sessions (BTLS1Se)

Number of back-end TLSv1.1 sessions on the NetScaler appliance.

TLSv1.2 sessions (BTLS1Se)

Number of back-end TLSv1.2 sessions on the NetScaler appliance.

Session multiplex attempts (BSeMx)

Number of back-end SSL session multiplex attempts on the NetScaler appliance.

Session multiplex successes (BSeMxS)

Number of back-end SSL session multiplex successes on the NetScaler appliance.

Session multiplex failures (BSeMxF)

Number of back-end SSL session multiplex failures on the NetScaler appliance.

Bytes encrypted (Enc)

Number of bytes encrypted on the NetScaler appliance.

Bytes decrypted (Dec)

Number of bytes decrypted on the NetScaler appliance.

Server in record (ServerInRecord)

Number server in record on the NetScaler appliance.

SSL session renegotiations (SSLRn)

Number of SSL session renegotiations on the NetScaler appliance.

SSLv3 session renegotiations (SSL3Rn)

Number of session renegotiations done on SSLv3.

TLSv1 session renegotiations (TLS1Rn)

Number of SSL session renegotiations done on TLSv1.

TLSv1.1 session renegotiations (TLS11Rn)

Number of SSL session renegotiations done on TLSv1.1.

TLSv1.2 session renegotiations (TLS12Rn)

Number of SSL session renegotiations done on TLSv1.2.

RSA 512-bit key exchanges (RSAKx5)

Number of RSA 512-bit key exchanges on the NetScaler appliance.

RSA 1024-bit key exchanges (RSAKx1)

Number of RSA 1024-bit key exchanges on the NetScaler appliance.

RSA 2048-bit key exchanges (RSAKx2)

Number of RSA 2048-bit key exchanges on the NetScaler appliance.

RSA 4096-bit key exchanges (RSAKx4)

Number of RSA 4096-bit key exchanges on the NetScaler appliance.

DH 512-bit key exchanges (DHKx5)

Number of Diffie-Helman 512-bit key exchanges on the NetScaler appliance.

DH 1024-bit key exchanges (DHKx1)

Number of Diffie-Helman 1024-bit key exchanges on the NetScaler appliance.

DH 2048-bit key exchanges (DHKx2)

Number of Diffie-Helman 2048-bit key exchanges on the NetScaler appliance.

ECDHE 521 curve key exchanges (ECDHEKx521)

Number of 521 Elliptical Curve Diffie-Helman on the NetScaler appliance.

ECDHE 384 curve key exchanges (ECDHEKx384)

Number of 384 Elliptical Curve Diffie-Helman on the NetScaler appliance.

ECDHE 256 curve key exchanges (ECDHEKx256)

Number of 256 Elliptical Curve Diffie-Helman on the NetScaler appliance.

ECDHE 224 curve key exchanges (ECDHEKx224)

Number of 224 Elliptical Curve Diffie-Helman on the NetScaler appliance.

RC4 40-bit encryptions (RC4En4)

Number of RC4 40-bit cipher encryptions on the NetScaler appliance.

RC4 56-bit encryptions (RC4En5)

Number of RC4 56-bit cipher encryptions on the NetScaler appliance.

RC4 64-bit encryptions (RC4En6)

Number of RC4 64-bit cipher encryptions on the NetScaler appliance.

RC4 128-bit encryptions (RC4En1)

Number of RC4 128-bit cipher encryptions on the NetScaler appliance.

DES 40-bit encryptions (DESEn4)

Number of DES 40-bit cipher encryptions on the NetScaler appliance.

DES 56-bit encryptions (DESEn5)

Number of DES 56-bit cipher encryptions on the NetScaler appliance.

3DES 168-bit encryptions (3DESEn1)

Number of DES 168-bit cipher encryptions on the NetScaler appliance.

AES 128-bit encryptions (AESEn1)

Number of AES 128-bit cipher encryptions on the NetScaler appliance.

AES 256-bit encryptions (AESEn2)

Number of AES 256-bit cipher encryptions on the NetScaler appliance.

RC2 40-bit encryptions (RC2En4)

Number of RC2 40-bit cipher encryptions on the NetScaler appliance.

RC2 56-bit encryptions (RC2En5)

Number of RC2 56-bit cipher encryptions on the NetScaler appliance.

RC2 128-bit encryptions (RC2En1)

Number of RC2 128-bit cipher encryptions on the NetScaler appliance.

AES-GCM 128-bit encryptions (AESGCMEn1)

Number of AEC-GCM 128-bit cipher encryptions on the NetScaler appliance.

AES-GCM 256-bit encryptions (AESGCMEn2)

Number of AEC-GCM 256-bit cipher encryptions on the NetScaler appliance.

Null cipher encryptions (NullEn)

Number of Null cipher encryptions on the NetScaler appliance.

MD5 hashes (MD5Hsh)

Number of MD5 hashes on the NetScaler appliance.

SHA hashes (SHAHsh)

Number of SHA hashes on the NetScaler appliance.

SHA256 hashes (SHA256Hsh)

Number of SHA256 hashes on the NetScaler appliance.

SHA384 hashes (SHA384Hsh)

Number of SHA384 hashes on the NetScaler appliance.

SSLv2 SSL handshakes (SSL2Hs)

Number of handshakes on SSLv2 on the NetScaler appliance.

SSLv3 SSL handshakes (SSL3Hs)

Number of handshakes on SSLv3 on the NetScaler appliance.

TLSv1 SSL handshakes (TLS1Hs)

Number of SSL handshakes on TLSv1 on the NetScaler appliance.

TLSv1.1 SSL handshakes (TLS11Hs)

Number of SSL handshakes on TLSv1.1 on the NetScaler appliance.

TLSv1.2 SSL handshakes (TLS12Hs)

Number of SSL handshakes on TLSv1.2 on the NetScaler appliance.

TLSv1.3 SSL handshakes (TLS13Hs)

Number of SSL handshakes on TLSv1.3 on the NetScaler appliance.

SSLv2 client authentications (SSL2CAt)

Number of client authentications done on SSLv2.

SSLv3 client authentications (SSL3CAt)

Number of client authentications done on SSLv3.

TLSv1 client authentications (TLS1CAt)

Number of client authentications done on TLSv1.

TLSv1.1 client authentications (TLS11CAt)

Number of client authentications done on TLSv1.1.

TLSv1.2 client authentications (TLS12CAt)

Number of client authentications done on TLSv1.2.

TLSv1.3 client authentications (TLS13CAt)

Number of client authentications done on TLSv1.3.

RSA authentications (RSAAt)

Number of RSA authentications on the NetScaler appliance.

DH authentications (DHAt)

Number of Diffie-Helman authentications on the NetScaler appliance.

DSS (DSA) authentications (DSSAt)

Total number of times DSS authorization is used on the NetScaler appliance.

ECDSA authentications (ECDSAAt)

Total number of times ECDSA authorization is used on the NetScaler appliance.

Null authentications (NullAt)

Number of Null authentications on the NetScaler appliance.

SSL session renegotiations (BSSLRn)

Number of back-end SSL session renegotiations on the NetScaler appliance.

SSLv3 session renegotiations (BSSL3Rn)

Number of back-end SSLv3 session renegotiations on the NetScaler appliance.

TLSv1 session renegotiations (BTLS1Rn)

Number of back-end TLSv1 session renegotiations on the NetScaler appliance.

TLSv1.1 back-end session renegotiations (BTLS1aRn)

Number of back-end TLSv1.1 session renegotiations on the NetScaler appliance.

TLSv1.2 back-end session renegotiations (BTLS12Rn)

Number of back-end TLSv1.2 session renegotiations on the NetScaler appliance.

RSA 512-bit key exchanges (BRSAKx5)

Number of back-end RSA 512-bit key exchanges on the NetScaler appliance.

RSA 1024-bit key exchanges (BRSAKx1)

Number of back-end RSA 1024-bit key exchanges on the NetScaler appliance.

RSA 2048-bit key exchanges (BRSAKx2)

Number of back-end RSA 2048-bit key exchanges on the NetScaler appliance.

DH 512-bit key exchanges (BDHKx5)

Number of back-end DH 512-bit key exchanges on the NetScaler appliance.

DH 1024-bit key exchanges (BDHKx1)

Number of back-end DH 1024-bit key exchanges on the NetScaler appliance.

DH 2048-bit key exchanges (BDHKx2)

Number of back-end DH 2048-bit key exchanges on the NetScaler appliance.

ECDHE 521 curve key exchanges (BECDHECx1)

Number of back-end ECDHE 521 curve Key exchanges on the NetScaler appliance.

ECDHE 384 curve key exchanges (BECDHECx2)

Number of back-end ECDHE 384 curve Key exchanges on the NetScaler appliance.

ECDHE 256 curve key exchanges (BECDHECx3)

Number of back-end ECDHE 256 curve Key exchanges on the NetScaler appliance.

ECDHE 224 curve key exchanges (BECDHECx4)

Number of back-end ECDHE 224 curve Key exchanges on the NetScaler appliance.

RC4 40-bit encryptions (BRC4En4)

Number of back-end RC4 40-bit cipher encryptions on the NetScaler appliance.

RC4 56-bit encryptions (BRC4En5)

Number of back-end RC4 56-bit cipher encryptions on the NetScaler appliance.

RC4 64-bit encryptions (BRC4En6)

Number of back-end RC4 64-bit cipher encryptions on the NetScaler appliance.

RC4 128-bit encryptions (BRC4En1)

Number of back-end RC4 128-bit cipher encryptions on the NetScaler appliance.

DES 40-bit encryptions (BDESEn4)

Number of back-end DES 40-bit cipher encryptions on the NetScaler appliance.

DES 56-bit encryptions (BDESEn5)

Number of back-end DES 56-bit cipher encryptions on the NetScaler appliance.

3DES 168-bit encryptions (B3DESE1n)

Number of back-end 3DES 168-bit cipher encryptions on the NetScaler appliance.

AES 128-bit encryptions (BAESEn1)

Back-end AES 128-bit cipher encryptions on the NetScaler appliance.

AES 256-bit encryptions (BAESEn2)

Back-end AES 256-bit cipher encryptions on the NetScaler appliance.

RC2 40-bit encryptions (BRC2En4)

Number of back-end RC2 40-bit cipher encryptions on the NetScaler appliance.

RC2 56-bit encryptions (BRC2En5)

Number of back-end RC2 56-bit cipher encryptions on the NetScaler appliance.

RC2 128-bit encryptions (BRC2En1)

Number of back-end RC2 128-bit cipher encryptions on the NetScaler appliance.

AES-GCM 128-bit encryptions (BAESGCMEn1)

Back-end AES-GCM 128-bit cipher encryptions on the NetScaler appliance.

AES-GCM 256-bit encryptions (BAESGCMEn2)

Back-end AES-GCM 256-bit cipher encryptions on the NetScaler appliance.

null encryptions (BNullEn)

Number of back-end null cipher encryptions on the NetScaler appliance.

MD5 hashes (BMD5Hsh)

Number of back-end MD5 hashes on the NetScaler appliance.

SHA hashes (BSHAHsh)

Number of back-end SHA hashes on the NetScaler appliance.

SHA256 hashes (BSHA256Hsh)

Number of back-end SHA256 hashes on the NetScaler appliance.

SHA384 hashes (BSHA384Hsh)

Number of back-end SHA384 hashes on the NetScaler appliance.

SSLv3 handshakes (BSSL3Hs)

Number of back-end SSLv3 handshakes on the NetScaler appliance.

TLSv1 handshakes (BTLS1Hs)

Number of back-end TLSv1 handshakes on the NetScaler appliance.

TLSv1.1 handshakes (BTLS11Hs)

Number of back-end TLSv1.1 handshakes on the NetScaler appliance.

TLSv1.2 handshakes (BTLS12Hs)

Number of back-end TLSv1.2 handshakes on the NetScaler appliance.

SSLv3 client authentications (BSSL3CAt)

Number of back-end SSLv3 client authentications on the NetScaler appliance.

TLSv1 client authentications (BTLS1CAt)

Number of back-end TLSv1 client authentications on the NetScaler appliance.

TLSv1.1 client authentications (BTLS11CAt)

Number of back-end TLSv1.1 client authentications on the NetScaler appliance.

TLSv1.2 client authentications (BTLS12CAt)

Number of back-end TLSv1.2 client authentications on the NetScaler appliance.

RSA authentications (BRSAAt)

Number of back-end RSA authentications on the NetScaler appliance.

DH authentications (BDHAt)

Number of back-end DH authentications on the NetScaler appliance.

DSS authentications (BDSSAt)

Number of back-end DSS authentications on the NetScaler appliance.

ECDSA authentications (BECDSAAt)

Number of back-end ECDSA authentications on the NetScaler appliance.

Null authentications (BNullAt)

Number of back-end null authentications on the NetScaler appliance.

RSA key exchanges offloaded (RSAkxOf)

Number of RSA key exchanges offloaded to the cryptography card.

RSA sign operations offloaded (RSASnOf)

Number of RSA sign operations offloaded to the cryptography card.

DH key exchanges offloaded (DHkxOf)

Number of DH key exchanges offloaded to the cryptography card.

RC4 encryptions offloaded (RC4EnOf)

Number of RC4 encryptions offloaded to the cryptography card.

DES encryptions offloaded (DESEnOf)

Number of DES encryptions offloaded to the cryptography card.

AES encryptions offloaded (AESEnOf)

Number of AES encryptions offloaded to the cryptography card.

AES-GCM 128-bit encryptions offloaded (AESGCMEnOf1)

Number of AES-GCM 128-bit encryptions offloaded to the cryptography card.

AES-GCM 256-bit encryptions offloaded (AESGCMEnOf2)

Number of AES-GCM 256-bit encryptions offloaded to the cryptography card.

Bytes encrypted in hardware (EncHw)

Number of bytes encrypted in hardware.

Bytes encrypted in software (EncSw)

Number of bytes encrypted in software.

Bytes encrypted on the front-end. (EncFe)

Number of bytes encrypted on the front-end.

Bytes encrypted in hardware on the front-end. (EncHwFe)

Number of bytes encrypted in hardware on the front-end.

Bytes encrypted in software on the front-end (EncSwFe)

Number of bytes encrypted in software on the front-end.

Bytes encrypted on the back-end (EncBe)

Number of bytes encrypted on the back-end.

Bytes encrypted in hardware on the back-end (EncHwBe)

Number of bytes encrypted in hardware on the back-end.

Bytes encrypted in software on the back-end (EncSwBe)

Number of bytes encrypted in software on the back-end.

Bytes decrypted in hardware (DecHw)

Number of bytes decrypted in hardware.

Bytes decrypted in software (DecSw)

Number of bytes decrypted in software.

Bytes decrypted on the front-end (DecFe)

Number of bytes decrypted on the front-end.

Bytes decrypted in hardware on the front-end (DecHwFe)

Number of bytes decrypted in hardware on the front-end.

Bytes decrypted in software on the front-end (DecSwFe)

Number of bytes decrypted in software on the front-end.

Bytes decrypted on the back-end (DecBe)

Number of bytes decrypted on the back-end.

Bytes decrypted in hardware on the back-end (DecHwBe)

Number of bytes decrypted in hardware on the back-end.

Bytes decrypted in software on the back-end. (DecSwBe)

Number of bytes decrypted in software on the back-end

Total SPCB in use (SPCBInUseCount)

Number of SPCB in use.

Active SSL sessions (sessionInUse)

Number of active SSL sessions on the NetScaler appliance.

Current queue size (curQsize)

Current queue size

In Q count for current card (CardInQCount)

Number of current SSL card InQ count.

In BulkQ count for current card (CardinBlkQ)

Number of current SSL card In BulkQ count.

In KeyQ count for current card (CardinKeyQ)

Number of current SSL card In KeyQ count.

Backend SSL sessions reused (BSeRe)

Number of back-end SSL sessions reused on the NetScaler appliance.

IDEA 128-bit encryptions (IDEAEn1)

Number of IDEA 128-bit cipher encryptions on the NetScaler appliance.

IDEA 128-bit encryptions (BIDEAEn1)

Number of back-end IDEA 128-bit cipher encryptions on the NetScaler appliance.

ssl crypto card status secondary (SSLCardStSecondary)

Status of the secondary SSL card(s). The value should be interpreted in binary form, with each set bit indicates a card as UP.