PLANET CS-2001 - Manual (Page 706)

695
Step 4. When a DDoS attack occurs, CS-2001 generates a corresponding log under
Anomaly Flow IP > Virus-infected IP, and if NetBIOS Notification is
enabled, sends a NetBIOS broadcast to both the victim user and IT
administrator to warn about the attack. （Figure 23-3）
Figure 23-3 Virus-Infected IP Addresses
Step 5. If running SNMP Trap Watcher, you will be informed of an anomaly flow
(or attack), if any, as long as SNMP trap alerts is enabled in System >
Configuration > SNMP. (Figure 23-7)
Figure 23-7 Alerts Received by the SNMP Client Software