The file is placed in the directory: /var/log/dpi/fastdpi_stat.log

This log contains statistics on traffic processed and blocked by VAS Experts DPI, on memory and processor load (file stat.log).

            Image 1

Information is presented as follows (see Image 1, Image 2):

• Memory used:
  1 – date and time of data accessing,
  2 – memory type,
  3 – information volume.
• CPU load:
  4 – general load,
  5 – load by cores.
• Statistics on VAS Experts DPI interfaces:
  6 – full statistics on received packets/bytes, blocked packets on all interfaces,
  7 - full statistics on received packets/bytes, blocked packets on the dna0 interface, here:
  • Rcvd: [2372621 pkts][381635326 bytes][0 pkts dropped] – received packets/bytes
  • Send: [4457954 pkts][4526709192 bytes] – transmitted packets/bytes
  • Esnd: [0 err_pkts][0.00 %] - errors occurred while sending packets
  • Drop: [0 pkts][0 bytes] – blocked packets/bytes
  • Pthr: [0 pkts][0 bytes] – the number of packets/bytes passing without analysis and processing
  • Emit: [0 pkts][0 bytes] – packets formed by VAS Experts DPI
  • Eemt: [0 err_pkts][0.00 %] - errors that occurred when sending packets generated by VAS Experts DPI
    

8 – actual statistics on received packets/bytes, blocked packets on dna0 interface,
9 – full statistics on the number of captured, processed, sent packets/sec (see Image 2), e.g. [Captured 1.47 pkt/sec][Processed 1.47 pkt/sec][Send 0.00 pkt/sec].
IPv4_thread_slave=#1 or 0 – flow statistics (0 or 1) – flow number.

         Image 2

• Protocol statistics:
  • Statistics by IP:
    10 – current flows number, here
    IPv4_total : allocate=1708/3008000 – parameter is set in /etc/dpi/fastdpi.conf:
    mem_tracking_flow (e.g.=3008000)
    3008000 – total / 1708 – taken
  • Blocking counters:
    url/lock=341/5 ( 0,0 )( 1,1,0,98879 )
    ssl/lock=47/0 ( 21,457 )( 0,69,69,196647 )
    chnprc=0
    ccheck/ip_check/lock=2954/503/76
    url/lock – URL checked/blocked
    
  • ( 0,0 ) :
    first 0 – number of URLs that could not be parsed
    second 0 – number of packets with partial URLs (URL in several packets)
    ( 1,1,0,98879 ) :
    1 – parsers used
    1 – parsers were used in total
    0 – how many parsers are not involved after use
    98879 –

how many parsers can be created

• ssl/lock – similarly to URL, but for cname
  chnprc=0 – parser change http ←→ htpps
  ccheck/ip_check/lock – 2954/503/76 statistics on check by IP/port
  
• 2954 – were to check by IP
  503 – how many times the check was actually performed
  76 – packets blocked
• Firewall statistics – 11.
• Netflow statistics – 12,

In version 9.4.1 statistics on packet sizes have been expanded, Jumbo Frames have been added
[STAT ][2020/09/09-13:44:33:322801] Packet size (abs/delta, in %):

                       <=64       <=128       <=256       <=512      <=1024      <=2048      <=4096      <=8192     >8192
      subs->inet:   0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0
      inet->subs:   0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0     0.0/0.0