Monitoring Interfaces

Each interface has associated counters, which enable traffic volume and error monitoring.


To limit the amount of administrative traffic, VPP only updates these counters every 10 seconds.

There are four commands used to monitor interfaces, show interface, show counters, interface clear counters, and show packet-counters.

show interface

The show interface command prints important traffic volume and error counters specific to each interface. For example:

tnsr# show interface

Interface: TenGigabitEthernet6/0/0
    Admin status: up
    Link up, link-speed 1000 Mbps, full duplex
    Link MTU: 1500 bytes
    MAC address: 00:90:0b:7a:8a:67
    IPv4 Route Table: ipv4-VRF:0
    IPv4 addresses:
    IPv6 Route Table: ipv6-VRF:0
    IPv6 addresses:
    VLAN tag rewrite: disabled
      received: 3388618 bytes, 13048 packets, 0 errors
      transmitted: 14862 bytes, 53 packets, 7 errors
      13008 drops, 0 punts, 0 rx miss, 0 rx no buffer

The show interface command also supports filtering of its output using one or more special keywords. When the list is filtered, its name, description, and administrative status are printed along with the chosen output.


Prints the access control lists configured on an interface


Prints the interface traffic counters for an interface


Prints the IPv4 addresses present on the interface and the IPv4 route table used by the interface.


Prints the IPv6 addresses present on the interface and the IPv6 route table used by the interface.


Prints the link status (e.g. up or down), media type and duplex, and MTU


Prints the hardware MAC address, if present


Prints the NAT role for an interface (e.g. inside or outside)

These keywords may be used with the entire list of interfaces, for example:

tnsr# show interface ipv4

The filtering may also be applied to a single interface:

tnsr# show interface TenGigabitEthernet6/0/0 link

Multiple keywords may also be used:

tnsr# show interface ipv4 link

show counters

The show counters command displays detailed information on all available interface counters.

Example output:

tnsr# show counters
Interface: TenGigabitEthernet6/0/0
    admin up, link up
              receiver        value                 transmit        value
             rx-bytes:      4020452                tx-bytes:        17072
           rx-packets:        15446              tx-packets:           62

             rx-error:            0                tx-error:            7
               rx-ip4:          952
               rx-ip6:            9
              rx-miss:            0
         rx-no-buffer:            0

                 drop:        15398
                 punt:            0

Counter values take a minimum of 10 seconds to be populated with valid data.

clear interface counters

The interface clear counters <name> command clears all counters on a given interface. This command is available in config mode. If no specific interface is given, all interfaces will have their counters cleared:

tnsr# configure
tnsr(config)# interface clear counters
Counters cleared

Available Counters

Counter Descriptions




bytes received


packets received


receiver errors


IPv4 packets received


IPv6 packets received


receiver miss


no buffers on receiver


bytes transmitted


packets transmitted


transmitter errors


packets dropped


packets punted

show packet-counters

The show packet-counters command prints packet statistics and error counters taken from the dataplane. These counters show counts of packets that have passed through various aspects of processing, such as encryption, along with various types of packet send/receive errors.

Example output:

tnsr# show packet-counters
   Count                    Node                  Reason
       624            dpdk-crypto-input           Crypto ops dequeued
       624          dpdk-esp-decrypt-post         ESP post pkts
       624            dpdk-esp-decrypt            ESP pkts received
       622               esp-encrypt              ESP pkts received
       624             ipsec-if-input             good packets received
       304                ip4-input               Multicast RPF check failed
         9                 ip4-arp                ARP requests sent
        22               lldp-input               lldp packets received on disabled interfaces
         8             ethernet-input             no error
         2             ethernet-input             unknown ethernet type
      5821             ethernet-input             unknown vlan
        16                arp-input               ARP request IP4 source address learned
        28      GigabitEthernet0/14/0-output      interface is down
         8       GigabitEthernet3/0/0-output      interface is down