How To Display The Default Attack Detector Configuration - Cisco SCE 8000 10GBE Software Configuration Manual

Monitoring Attack Filtering

How to Display the Default Attack Detector Configuration

From the SCE> prompt, type:
Command
show interface linecard 0 attack-detector
default
Example
SCE>show interface LineCard 0 attack-detector default
Default detector:
Protocol|Side|Direction
--------|----|-----------||------|----------|------------|-------|-----|-----
TCP
TCP
TCP
TCP
TCP
TCP
TCP+port|net.|source-only||Report|
TCP+port|net.|dest-only
TCP+port|sub.|source-only||Report|
TCP+port|sub.|dest-only
TCP+port|net.|source+dest||Report|
TCP+port|sub.|source+dest||Report|
UDP
UDP
UDP
UDP
UDP
UDP
UDP+port|net.|source-only||Report|
UDP+port|net.|dest-only
UDP+port|sub.|source-only||Report|
UDP+port|sub.|dest-only
UDP+port|net.|source+dest||Report|
UDP+port|sub.|source+dest||Report|
ICMP
ICMP
ICMP
ICMP
other
other
other
other
SCE#>
How to Display All Attack Detector Configurations
From the SCE> prompt, type:
Command
show interface linecard 0 attack-detector all
Cisco SCE 8000 10GBE Software Configuration Guide
12-28
||Action|
| | ||
| | ||
|net.|source-only||Report|
|net.|dest-only ||Report|
|sub.|source-only||Report|
|sub.|dest-only ||Report|
|net.|source+dest||Report|
|sub.|source+dest||Report|
||Report|
||Report|
|net.|source-only||Report|
|net.|dest-only ||Report|
|sub.|source-only||Report|
|sub.|dest-only ||Report|
|net.|source+dest||Report|
|sub.|source+dest||Report|
||Report|
||Report|
|net.|source-only||Report|
|net.|dest-only ||Report|
|sub.|source-only||Report|
|sub.|dest-only ||Report|
|net.|source-only||Report|
|net.|dest-only ||Report|
|sub.|source-only||Report|
|sub.|dest-only ||Report|
Chapter 12 Identifying and Preventing Distributed Denial-of-Service Attacks
Purpose
Displays the default attack detector configuration.
Thresholds
|Open flows|Ddos-Suspected flows|notif|
|rate |rate
1000| 500|50
1000| 500|50
1000| 500|50
1000| 500|50
100| 50|50
100| 50|50
1000| 500|50
1000| 500|50
1000| 500|50
1000| 500|50
100| 50|50
100| 50|50
1000| 500|50
1000| 500|50
1000| 500|50
1000| 500|50
100| 50|50
100| 50|50
1000| 500|50
1000| 500|50
1000| 500|50
1000| 500|50
100| 50|50
100| 50|50
500| 250|50
500| 250|50
500| 250|50
500| 250|50
500| 250|50
500| 250|50
500| 250|50
500| 250|50
Purpose
Displays all attack detector configurations.
|Sub- |Alarm
|ratio | |
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
|No |No
OL-30621-02