Which command prints the current firewall rules with counters?

Which command prints the current firewall rules with counters?

• A. /ip firewall filter print
• B. /ip firewall filter print stats
• C. /ip firewall nat print stats
• D. /system clock print

Answer: (B)

To see firewall rules together with how often they’ve matched, use the print command with the stats option for the filter rules. The filter print shows each firewall rule, and adding stats attaches per-rule counters that display how many packets (and bytes) have matched each rule. This makes it easy to identify which rules are actually being hit and how much traffic they’re handling. Without stats, you only see the rules themselves, not their activity. Using stats for NAT would show counters for NAT rules, which is a different part of the firewall, and the system clock command is unrelated to firewall rules.

To see firewall rules together with how often they’ve matched, use the print command with the stats option for the filter rules. The filter print shows each firewall rule, and adding stats attaches per-rule counters that display how many packets (and bytes) have matched each rule. This makes it easy to identify which rules are actually being hit and how much traffic they’re handling. Without stats, you only see the rules themselves, not their activity. Using stats for NAT would show counters for NAT rules, which is a different part of the firewall, and the system clock command is unrelated to firewall rules.