Figure 48, Table 46 – H3C Technologies H3C SecCenter IPS Manager User Manual

Page 54

Figure 48 Attack event details

Table 46 Attack event details query options

Option Description

Filter

Select a filter from the dropdown list to display specific attack events.

Type

Select the attack type. Options include Blocked attack events and Other attack events.
The default is --, which means any attack type.

Device

Select a device, a device group, or All devices from the Device dropdown list. The system
will display the relevant event information. All devices and device groups that are under
your management will appear in the dropdown list.

•

Select a device group: Specifies all devices in the device group.

•

Select a device name: Specifies a single device.

Event Name

Select an attack event by its name.

Protocol

Select the protocol. The default is --, which means any protocol.

Severity

Select the attack severity. The default is --, which means any severity.

Src IP

Specify the source IP address.

Dest IP

Specify the destination IP address.

Dest Port

Specify the destination port.

Specifies the event ID.

Duration

Select the statistics duration. You can select Day, Week, or Month, or select Customize to
specify a duration.

Time

Select the statistics time. The value range varies with the selected statistics duration.

Grouping by

Select a grouping mode. The system supports seven modes: None, Event, Src IP, Dest IP, Src
IP and Dest IP, Dest Port, and Protocol.