H3C Technologies H3C SecBlade IPS Cards - Manual (Page 89)

12-6
Item Description
Actions
Select the actions to be included in the action set:
z Permit/block—Either is required. You can allow or deny packets to pass. You must
select a block action in the pull-down box if Block is selected.
z Packet trace—Trace the packets, that is, obtain some information from the packets
and form a packet trace file in use for analysis. Click the hyperlink for the packet trace
name, which is Packet Trace by default, to enter the configuration page as shown in
Figure 12-7 . In this page, you can modify the trace action. Detailed description is given
in Table 12-5 .
z Notify—Add the notify action in the action set. You need to select a notify action from
the drop-down list.
z Interfere—You can select this action together with only the Permit action. This action
allows packets to pass but with interference information so that the destination
receives faulty packets.
z When you click the hyperlink for packet trace, a dialog box appears to prompt that
modifications that have not been saved will get lost if you want to enter the new page.
Click OK to enter the packet trace configuration page.
z Control the time for packet tracing since a great amount of packet trace files will be
generated in case of high traffic rate, resulting in great occupation of storage space
and thus affecting normal operation of the system.
Figure 12-7 Packet trace configuration page
Table 12-5 Packet trace action configuration items
Item Description
Name Enter a name for the packet trace action
Description
Enter a description for the packet trace action, for example, the function of the
packet trace action
Max Captured Length of
Each Packet
Specify the maximum length of data to be captured from each packet
Max Number of Packets
Captured Each Time
Specify the maximum number of packets contained in a packet trace file