Display Attack-Defense Scan Attacker Ip - H3C MSR Series Command Reference Manual

Field
VPN instance
Type
Rate threshold(PPS)
Dropped

display attack-defense scan attacker ip

Use display attack-defense scan attacker ip to display information about IPv4 scanning attackers.
Syntax
Centralized devices in standalone mode:
display attack-defense scan attacker ip [ interface interface-type interface-number | local ]
[ count ]
Distributed devices in standalone mode/centralized devices in IRF mode:
display attack-defense scan attacker ip [ [ interface interface-type interface-number | local ]
[ slot slot-number ] ] [ count ]
Distributed devices in IRF mode:
display attack-defense scan attacker ip [ [ interface interface-type interface-number | local ]
[ chassis chassis-number slot slot-number ] ] [ count ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
local: Specifies the device.
slot slot-number: Specifies a card by its slot number. This option is available only when you specify
the device or a global interface, such as a VLAN interface or tunnel interface. If you do not specify a
card, this command displays information about IPv4 scanning attackers for all cards. (Distributed
devices in standalone mode.)
slot slot-number: Specifies an IRF member device by its member ID. This option is available only
when you specify the device or a global interface, such as a VLAN interface or tunnel interface. If you
do not specify a member device, this command displays information about IPv4 scanning attackers
for all member devices. (Centralized devices in IRF mode.)
chassis chassis-number slot slot-number: Specifies a card on an IRF member device. The
chassis-number argument represents the member ID of the IRF member device. The slot-number
argument represents the slot number of the card. This option is available only when you specify the
device or a global interface, such as a VLAN interface or tunnel interface. If you do not specify a card,
this command displays information about IPv4 scanning attackers for all cards. (Distributed devices
in IRF mode.)
Description
MPLS L3VPN instance to which the protected IPv6 address belongs. If the
protected IPv6 address is on the public network, this field displays
hyphens (--).
Type of the flood attack.
Threshold for triggering the flood attack prevention, in units of packets
sent to the IPv6 address per second. If no rate threshold is set, this field
displays 1000.
Number of dropped attack packets. If the prevention action is logging, this
field displays 0.
1005