H3C Technologies H3C SecCenter UTM Manager - Manual (Page 149)

141
Field Description
Src Port Source port
Dest Port Destination port
Figure 133 DDoS current event list
Table 121 Fields of the DDoS current event
Field Description
Time Time when the DDoS event occurred
Protected Network IP network segment protected against the DDoS attack
Src IP Source IP address
Dest IP Destination IP address
Attack type Type of the DDoS attack
Protocol Name of the protocol used by the DDoS attack event
Measure Attack name of the DDoS attack event
Threshold Threshold of the DDoS attack event
Max Avg Rate Maximum average rate of the DDoS attack event
Monitoring devices
In addition to the UTM event information of the entire network, the IPS management component also
allows you to view the UTM event information of every UTM device.
From the navigation tree of the IPS management component, select Device Monitoring under Realtime
Monitoring to enter the device monitoring page, as shown in Figure 134 . This page lists the attack
protection, virus protection, and DDoS attack information in the last hour, including the total number of
events, number of blocked events, number of source/destination IP addresses, and number of
source/destination ports.