Which command lists the firewall rules with their counters?

Which command lists the firewall rules with their counters?

• A. /ip firewall filter print
• B. /ip firewall filter print stats
• C. /ip firewall nat print stats
• D. /system clock print

Answer: (B)

To see how many times each firewall rule has matched, you need to view the rule list with its counters. The per-rule counters (packets and bytes that matched the rule) are shown when you add the stats option to the print command. So listing the filter rules with stats gives you both the rules and their usage counters in one view. Without stats, you’d see the rules themselves but not how much they’ve matched. Printing NAT rules with stats would reveal counters for NAT rules, not the standard filter rules. And printing the system clock shows the time, not firewall rule details.

To see how many times each firewall rule has matched, you need to view the rule list with its counters. The per-rule counters (packets and bytes that matched the rule) are shown when you add the stats option to the print command. So listing the filter rules with stats gives you both the rules and their usage counters in one view. Without stats, you’d see the rules themselves but not how much they’ve matched. Printing NAT rules with stats would reveal counters for NAT rules, not the standard filter rules. And printing the system clock shows the time, not firewall rule details.