Show or clear TX, RX, and Error counters.

Show or clear all drop counters.

Show or clear Ingress Header Processing (IHP) drop counters for the EIF module.

Show or clear IHP drop counters for the Host TX (HTX) module.

Show or clear IHP drop counters for the IP Tunnel Inbound (IPTI) module.

Show or clear IHP drop counters for the L2 Tunnel Inbound (HTX) module.

Show or clear IHP drop counters for the Reassembly (DFR) module.

Show or clear IHP drop counters for the Extensible Header Processing (XHP) module.

Show or clear IHP drop counters for the L2P ingress/egress processing module.

Show or clear IHP drop counters for the Host Interface (HIF).

Show or clear IPsec drop counters.

Show or clear DSW drop counters.

Show or clear DSW drop counters by source modules.

Show or clear DSW drop counters by destination modules.

Show or clear engine counter statistics for DSW ingress modules.

Show or clear counter statistics for DSW egress modules based on queue index.

Show or clear Host Interface (HIF) statistic for each TX and RX host queue.

Show counters of packet and byte count for active modules.

Show Packet Buffer Allocator (PBA) information. PBA is a key indicator for determining the current state of the NP7. If normal and current pba, dba, and hba are different when no traffic is flowing, then !!!Leak!!! will appear at the bottom, indicating a potential NP7 issue.

Show or clear process monitor data that shows the processor load each NP7 software module is using. Can be used for NP7 performance monitoring, see Diagnose npu np7 pmon for NP7 performance monitoring.

Show the FortiGate interfaces, the NP7 that each interface is connected to, and the port to NPU port mapping configuration. You can configure NPU port mapping using the following command:

config system npu

config port-npu-map

edit <interface-name>

set npu-group-index {0 | 1 | 2}

end

Show or clear Session Search Engine (SSE) command statistics, which show the number of sessions for various operations.

Show NP7 session statistics, including the following:

entcnt total number of valid sessions.

inssuc number of successfully inserted sessions.

insfail number of sessions that fail to be inserted.

updsucc total number of session update that have been successfully

executed.

delsucc number of sessions that have been deleted successfully.

delfail number of sessions that fail to be deleted due to no matching session found.

depfail OFT max chain depth reached fail count. Should remain zero.

srhsucc number of sessions successfully searched (search hit).

srhfail number of sessions whose search failed (search miss).

agesucc total number of successful session removal by aging.

chdepth Maximum OFT chain depth allowed.

phtbase Lower 32 bits of PHT base address.

phtsize PHT size.

oftbase Lower 32 bits of OFT base address.

oftsize Size of overflow table.

oftfcnt OFT free bucket count.

Show the current NP7 configuration. Most of the configuration is set by the config system npu command.

Show NP7 registers. Optionally specify a <block> to show registers for a specific block. For example:

diagnose npu np7 register 0 sse* list.

Show DDR size and debug information.

Enable or disable DDR access of sub-modules.

Run DDR memory testing.

Where:

<channel> is the DDR channel to test and can be 0, 1, 2, 3, 4, or 5.

<start-hex> and <end-hex> define the range of memory addresses for which to run the test in hexadecimal format.

<size-hex> is the size of the memory in hexadecimal format.

<pattern> can be 0 walkone, 1 walkzero, 2 incremental, and 3 random.

Display a true random number generated by the NP7 true random number generator.

Show true random number generator frequency information.

Show NP7 debug information. Enter diagnose npu np7 debug-cgmac ? to view the available <options>.

Show HPE host queue type shaping statistics.