Ssl command, bigpipe

From NetworkCommands

A command available on F5 BigIP platforms; used to display or reset system-wide SSL statistics.

Usage Syntax

bigpipe ssl [stats reset]

The stats reset option resets the statistics, otherwise the command displays statistics.

Usage Examples

bigpipe ssl - display current system-wide SSL statistics

bigpipe tcp stats reset - reset current system-wide TCP statistics

Usage Notes

System-Wide in this case refers to the LTM system and thus the statistics shown only related to traffic dealt with by LTM. In other words, these statistics exclude management traffic and any traffic dealt with solely by the underlying Linux operating system such as ARP, NTP and any traffic that is simply routed through the device.

Client side and server side statistics are displayed separately.

Using command syntax bigpipe ssl is actually executing command: bigpipe tcp stats show all

Bigpipe Usage Notes

Don't forget to save your changes using the bigpipe save all command.

Note in most cases, the show keyword displays object status or statistics, the list keyword displays configuration.

The bigpipe command can be abbreviated to just b (e.g. b help instead of bigpipe help.) Alternatively, (from v9.4,) you can use the bigpipe shell to enter commands without prefixing them with bigpipe.

Where curly or normal brackets {} or () or quotes "" or exclamation mark ! are required as part of a command and you are not using the bigpipe shell, they must be proceeded with a back slash \ to prevent the bash shell from parsing them as system commands.

Typical Output

GLOBAL CLIENT-SIDE SSL STATISTICS
|     conn (cur, max) = (0, 178)
|     native conn (cur, max, tot) = (0, 178, 27502)
|     compat conn (cur, max, tot) = (0, 0, 0)
|     conn (full, assist, none) = (27475, 27, 0)
|     (in, out) = encrypt (328.9M, 3.401G)  decrypt (322.1M, 3.381G)
|     record (in, out, bad) = (96558, 678273, 0)
|     protocol (SSLv2, SSLv3, TLSv1) = (0, 27274, 118)
|     certs (valid, invalid, none) = (0, 0, 27392)
|     cache (curr, lookups, hits) = (834, 27093, 26397)
|     cache (overflow, invalid) = (0, 0)
|     unclean shutdowns = 27504
|     handshakes (mid-stream, error, non-SSL) = (0, 2, 0)
|     fatal alerts = 0

GLOBAL SERVER-SIDE SSL STATISTICS
|     conn (cur, max) = (0, 0)
|     native conn (cur, max, tot) = (0, 0, 0)
|     compat conn (cur, max, tot) = (0, 0, 0)
|     conn (full, assist, none) = (0, 0, 0)
|     (in, out) = encrypt (0, 0)  decrypt (0, 0)
|     record (in, out, bad) = (0, 0, 0)
|     protocol (SSLv2, SSLv3, TLSv1) = (0, 0, 0)
|     certs (valid, invalid, none) = (0, 0, 0)
|     cache (curr, lookups, hits) = (0, 0, 0)
|     cache (overflow, invalid) = (0, 0)
|     unclean shutdowns = 0
|     handshakes (mid-stream, error, non-SSL) = (0, 0, 0)
|     fatal alerts = 0

Related Commands

Use the bigpipe tcp command to display or reset the equivalent TCP statistics

Use the bigpipe udp command to display or reset the equivalent UDP statistics

Use the bigpipe icmp command to display or reset the equivalent ICMP statistics

The bigpipe interface command provides interface level, network layer protocol independent, layer two statistics.

Related Articles

You may be interested in out Viewing F5 BigIP Statistics article

Information on other F5 BigIP commands

Information on Linux commands

Information on Cisco commands

Information on Vyatta commands

Information on Extreme commands

Information on Secure Platform commands

Information on Blue Coat SGOS commands

Information on Nokia IPSO commands

We really do appreciate all feedback so please do send your comments, suggestions or corrections to steve#networkstuff.eu (replacing the # with an @)