AirLive IAR-5000 v2 - Manual (Page 176)

13. Anomaly Flow IP
171 AirLive IAR-5000 User’s Manual
Figure 13-5 The Alert Notification Sent through an Email Message
Step4. When a DDoS attack occurs, IAR-5000 will warn about the anomaly flow under
Anomaly Flow IP
Æ Intrusion IP or alert the intruder and the system
administrator about it through a NetBIOS broadcast. (Figure 13-6,7, 8)
Figure 13-6 Intrusion IP Addresses