H3C Technologies H3C SecCenter UTM Manager - Manual (Page 147)

139
Figure 130 Virus protection event snapshot
Displaying attack/virus/DDoS snapshot list
The attack/virus/DDoS event snapshot list presents you the attack/virus/DDoS attack events that
occurred during the last hour in order of time, with the most recent event at the top. Each event record
includes the event’s time, device IP address, source IP address and MAC address, destination IP address
and MAC address, event description, protocol, source port, and destination port, helping you track the
latest security status of the network in an intuitive way.
UTM Manager allows you to view attack and virus events of interest by using filters. For information about
filter configuration, see “ Managing filters .”
Configuration guide
From the navigation tree of the IPS management component, select Attack Snapshot List, Virus Snapshot
List, or DDoS Current Event List under Realtime Monitoring to enter the attack snapshot list page, the virus
snapshot list page, or the DDoS current event list page, as shown in Figure 131 , Figure 132 , and Figure
133 . Table 119 describes the query options of the attack/virus snapshot list, Table 120 describes the
fields of the attack/virus snapshot list, and Table 121 describes the fields of the DDoS current event list.