H3C Technologies H3C SecCenter IPS Manager - Manual (Page 54)

48
Figure 48 Attack event details
Table 46 Attack event details query options
Option Description
Filter Select a filter from the dropdown list to display specific attack events.
Type
Select the attack type. Options include Blocked attack events and Other attack events.
The default is --, which means any attack type.
Device
Select a device, a device group, or All devices from the Device dropdown list. The system
will display the relevant event information. All devices and device groups that are under
your management will appear in the dropdown list.
• Select a device group: Specifies all devices in the device group.
• Select a device name: Specifies a single device.
Event Name Select an attack event by its name.
Protocol Select the protocol. The default is --, which means any protocol.
Severity Select the attack severity. The default is --, which means any severity.
Src IP Specify the source IP address.
Dest IP Specify the destination IP address.
Dest Port Specify the destination port.
ID Specifies the event ID.
Duration
Select the statistics duration. You can select Day, Week, or Month, or select Customize to
specify a duration.
Time Select the statistics time. The value range varies with the selected statistics duration.
Grouping by
Select a grouping mode. The system supports seven modes: None, Event, Src IP, Dest IP, Src
IP and Dest IP, Dest Port, and Protocol.