{"type":"api","title":"Get System Netfilter","meta":{"id":"/apps/pubhub/media/cisco-catalyst-sd-wan-api-guide-20-18/1c4807bcb76af36988ebb37dc2e455b1787a155e/d2f02ba2-fd0d-3a26-bcc5-feafc8f24d17","info":{"title":"Monitoring and Troubleshooting","description":"Includes API operations for the following:\n- Real-time monitoring\n- Accessing statistics APIs and statistics bulk APIs\n- Retrieving device state\n- Managing alarms and events\n","contact":{"email":"vmanage@cisco.com"},"version":"20.18 - 2025-08-15"},"openapi":"3.1.0","servers":[{"url":"/dataservice"}]},"spec":{"tags":["Real-Time Monitoring - Tools"],"description":"Get system netfilter info from device","operationId":"getSystemNetfilter","parameters":[{"name":"deviceId","in":"query","description":"Device Id","required":true,"schema":{"type":"string"}}],"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object"},"examples":{"System Netfilter info":{"description":"System Netfilter info","value":{"ipv4":"Chain POLICE_PROT (2 references)\n pkts bytes target prot opt in out source destination \n 113K 16M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:830\n 0 0 ACCEPT tcp -- * * 0.0.0.0/0 172.16.255.11 tcp dpt:830\n 0 0 ACCEPT icmp -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 \n 0 0 ACCEPT 89 -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 \n 0 0 ACCEPT tcp -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22\n 0 0 ACCEPT tcp -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:179\n 0 0 ACCEPT tcp -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:830\n 0 0 ACCEPT udp -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68\nChain INPUT (policy ACCEPT 760K packets, 433M bytes)\n pkts bytes target prot opt in out source destination \n 113K 16M POLICE_PROT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:830\n 0 0 LOGGING tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:830\n 921K 494M ACCEPT all -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 ctstate ESTABLISHED\n 0 0 POLICE_PROT all -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 \n 0 0 LOGGING all -- ge0_2 * 0.0.0.0/0 0.0.0.0/0 \nChain LOGGING (2 references)\n pkts bytes target prot opt in out source destination \n 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ","ipv6":"Chain INPUT (policy ACCEPT 90 packets, 5040 bytes)\n pkts bytes target prot opt in out source destination \n 0 0 ACCEPT all ge0_2 * ::/0 ::/0 ctstate ESTABLISHED\n 30 1680 POLICE_PROT all ge0_2 * ::/0 ::/0 \n 0 0 LOGGING all ge0_2 * ::/0 ::/0 \nChain POLICE_PROT (1 references)\n pkts bytes target prot opt in out source destination \n 0 0 ACCEPT tcp * * ::/0 ::/0 tcp dpt:830\n 30 1680 ACCEPT icmpv6 ge0_2 * ::/0 ::/0 \n 0 0 ACCEPT 89 ge0_2 * ::/0 ::/0 \n 0 0 ACCEPT tcp ge0_2 * ::/0 ::/0 tcp dpt:22\n 0 0 ACCEPT tcp ge0_2 * ::/0 ::/0 tcp dpt:179\n 0 0 ACCEPT tcp ge0_2 * ::/0 ::/0 tcp dpt:830\n 0 0 ACCEPT udp ge0_2 * ::/0 ::/0 udp spt:547 dpt:546\nChain LOGGING (1 references)\n pkts bytes target prot opt in out source destination \n 0 0 DROP all * * ::/0 ::/0 "}}}}}},"400":{"description":"Bad Request"},"403":{"description":"Forbidden"},"500":{"description":"Internal Server Error"}},"method":"get","path":"/device/tools/system-netfilter"}}