Table 49 – H3C Technologies H3C SecCenter IPS Manager User Manual

Page 57

Option Description

Device

Select a device, a device group, or All devices from the Device dropdown list. The system
will display the relevant event information. All devices and device groups that are under
your management will appear in the dropdown list.

•

Select a device group: Specifies all devices in the device group.

•

Select a device name: Specifies a single device.

Event

Select a virus event.

Protocol

Select the protocol. The default is --, which means any protocol.

Src IP

Specify the source IP address.

Dest IP

Specify the destination IP address.

Src Port

Specify the source port.

Duration

Select the statistics duration. You can select Day, Week, or Month, or select Customize to
specify a statistics duration.

Time

Select the statistics time. The value range varies with the selected statistics duration.

Grouping by

Select a grouping mode. The system supports seven modes: None, Event, Src IP, Dest IP,
Src IP and Dest IP, Dest Port, and Protocol.

Table 49 Fields of the virus event details

Field Description

Time

Time when the virus event occurred

Src IP/MAC

Source IP address

Dest IP/MAC

Destination IP address

Event

Description of the event

Src Port

Source port

Protocol —

VLAN

VLAN in which the attack event occurred

Agent IP

IP address of the agent for the attack event

Event Count

Number of the events that occurred at the time

Details

Click the

icon of a virus event to view the virus event details, as shown in

Figure 51

Figure 51 Virus event details