Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=user-guide-features-monitor-port-statistics

Statistics

The Statistics page shows information about traffic sent and received by the ports and protocols on the switch.

L2

The L2 tab shows information about Layer 2 protocols, such as Spanning Tree Protocol (STP), GARP VLAN Registration Protocol, and Cisco Discovery Protocol (CDP).

Spanning tree

STP prevents network loops by exchanging Bridge Protocol Data Units (BPDUs) with other switches on the network. The Spanning tree tab shows statistics about STP traffic on the switch. You can see the following information:

  • Port: The port to which the traffic statistics apply
  • RX BPDU: The number of BPDUs received
  • TX BPDU: The number of BPDUs sent
  • Invalid BPDU: The number of BPDUs the switch considers invalid

GVRP

GVRP uses "Join" and "Leave" messages to manage the switch's VLAN membership. The GVRP tab shows statistics about GVRP traffic on the switch. You can see the following information:

  • Port: The port to which the traffic statistics apply
  • RX join empty: The number of "JoinEmpty" messages received
  • RX join in: The number of "JoinIn" messages received
  • RX leave in: The number of "LeaveIn" messages received
  • RX leave all: The number of "LeaveAll" messages received
  • RX leave empty: The number of "LeaveEmpty" messages received
  • Drop: The number of GVRP messages dropped

You can select additional information to show on the GVRP tab. Click the ellipsis Ellipsis. and select the options you want to show. Select the columns you want to add to the table from the following list:

  • RX empty: The number of "Empty" messages received
  • RX total: The total number of GVRP messages received
  • TX join empty: The number of "JoinEmpty" messages sent
  • TX join in: The number of "JoinIn" messages sent
  • TX leave in: The number of "LeaveIn" messages sent
  • TX leave all: The number of "LeaveAll" messages sent
  • TX leave empty: The number of "LeaveEmpty" messages sent
  • TX empty: The number of "Empty" messages sent
  • TX total: The total number of GVRP messages sent

CDP

CDP is a proprietary Cisco protocol for discovering and managing neighboring network devices. The CDP tab shows statistics about CDP traffic on the switch. You can see the following information:

  • Port: The port to which the traffic statistics apply
  • RX version 1: The number of CDP version 1 messages received
  • RX version 2: The number of CDP version 2 messages received
  • RX total: The total number of CDP messages received
  • TX version 1: The number of CDP version 1 messages sent
  • TX version 2: The number of CDP version 2 messages sent
  • TX total: The total number of CDP messages sent
  • Invalid checksum: The number of CDP messages with an invalid checksum
  • Other errors: The number of CDP messages with other errors

L3

The L3 tab shows statistics on Layer 3 protocols, such as DHCP snooping.

DHCP snooping

DHCP snooping lets you protect your network from unauthorized DHCP servers by specifying which ports on the switch connect to your DHCP servers. The DHCP snooping tab shows statistics about DHCP traffic on the switch. You can see the following information:

  • VLAN: The VLAN to which the traffic statistics apply
  • RX discovers: The number of "DHCPDISCOVER" messages received
  • RX requests: The number of "DHCPREQUEST" messages received
  • RX releases: The number of "DHCPRELEASE" messages received
  • RX declines: The number of "DHCPDECLINE" messages received
  • RX informs: The number of "DHCPINFORM" messages received
  • TX offers: The number of "DHCPOFFER" messages sent

You can select additional information to show on the DHCP snooping tab. Click the ellipsis Ellipsis. and select the options you want to show. Select the columns you want to see from the following list:

  • TX acks: The number of "DHCPACK" messages sent
  • TX naks: The number of "DHCPNACK" messages sent
  • MAC discard: The number of DHCP messages discarded due to a MAC address mismatch
  • Server discard: The number of DHCP messages discarded from servers on untrusted ports
  • Option discard: The number of DHCP messages discarded due to option violations
  • Total discard: The total number of DHCP messages discarded

802.1X security

802.1X security protects your network by requiring devices to authenticate before being granted network access. The 802.1x security tab shows statistics about 802.1x authentication traffic on the switch. You can see the following information:

  • Port: The port to which the traffic statistics apply
  • TX req ID: The total number of EAP-Request/Identity frames sent

  • TX req: The total number of EAP-Request frames sent, excluding the EAP-Request/Identity frames

    Note

    The "TX req" column may incorrectly show TX req ID in the selection list and as the column header. A fix for this is planned for a future update.

  • TX total: The total number of authentication messages sent

  • RX start: The number of start messages received
  • RX logoff: The number of logoff messages received
  • RX resp ID: The total number of EAP-Request/Identity frames received
  • RX resp: The total number of EAP-Request frames received, excluding the EAP-Request/Identity frames
  • RX invalid: The number of invalid messages received

You can select additional information to show on the 802.1X security tab. Click the ellipsis Ellipsis. and select the options you want to show. Select the columns you want to see from the following list:

  • RX length err: The number of messages received with length errors
  • RX total: The total number of 802.1x messages received
  • RX version: The number of version messages received
  • Last RX src MAC: The source MAC address of the last received authentication message

Port

The Port tab shows statistics about all traffic on all ports of the switch. You can see the following information:

  • RX bytes: The total bytes received on the port
  • RX unicast: The total bytes of unicast packets received on the port
  • RX n unicast: The total bytes of unicast packets received on the port
  • RX discard: The total bytes of discarded packets on the port
  • RX multicast: The total bytes of multicast packets received on the port
  • RX broadcast: The total bytes of broadcast packets received on the port
  • RX error: The number of packets received with errors

You can select additional information to show on the 802.1X security tab. Click the ellipsis Ellipsis. and select the options you want to show. Select the columns you want to see from the following list:

  • HC in count: The High Capacity (HC) IN COUNT, or total bytes received on the port
  • TX byte: The total bytes sent on the port
  • TX unicast: The total bytes of unicast packets sent on the port
  • TX n unicast: The total bytes of unicast packets sent on the port
  • TX discard: The total bytes of sent packets discarded on the port
  • TX multicast: The total bytes of multicast packets sent on the port
  • TX broadcast: The total bytes of broadcast packets sent on the port
  • TX error: The total bytes of error packets sent on the port
  • HC out count: The High Capacity (HC) OUT COUNT, or total bytes sent on the port

RMON

Remote Network Monitoring (RMON) extends the capabilities of SNMP to help you remotely analyze, monitor, and troubleshoot your network. The RMON tab shows statistics about RMON traffic on the switch. You can see the following information:

  • ID: The configured index for RMON events
  • Data source: The configured data source for RMON events
  • Drop events: The total number of drop events
  • Bytes: The total number of bytes received
  • Packets: The total number of packets received
  • Broadcast packets: The number of good broadcast packets received
  • Multicast packets: The number of good multicast packets received

You can select additional information to show on the RMON tab. Click the ellipsis Ellipsis. and select the options you want to show. Select the columns you want to see from the following list:

  • CRC alignment errors: The number of packets received with Cyclic Redundancy Check (CRC) errors
  • Undersized packets: The number of received packets smaller than the minimum Ethernet frame size
  • Oversized packets: The number of received packets larger than the defined MRU or MTU
  • Fragments: The number of fragments received on the port
  • Jabbers: The number of received oversized packets with a valid CRC
  • Collisions: The number of collisions received
  • Frames of 64 bytes: The number of 64-byte frames received
  • Frames of 65 to 127 bytes: The number of 65 to 127-byte frames received
  • Frames of 128 to 255 bytes: The number of 128 to 255-byte frames received
  • Frames of 256 to 511 bytes: The number of 256 to 511-byte frames received
  • Frames of 512 to 1023 bytes: The number of 512 to 1023-byte frames received
  • Frames of 1024 to 1518 bytes: The number of 1024 to 1518-byte frames received

Note

Frames of 256 to 511 bytes, Frames of 512 to 1023 bytes, and Frames of 1024 to 1518 bytes may incorrectly show Frames of 128 to 255 bytes in the selection list and as the column header. A fix for this is planned for a future update.