Enterasys Intrusion Prevention System Reporting Manual page 51

24 Hours Reports
Right-clicking on an event displays a menu of further actions that can be applied to the event, as
shown in
descriptions of the options.
Single clicking on a data group in the charts or table view causes details of the event to display in
the Event Table pane. The Event Table pane is described in detail in
Figure 3-2 Event Log Report
Table 3-2 Right-Click Action Menu Options
Option
Event Details
Source Address Lookup
Destination Address Lookup
Session Rebuild
Download PCAP
Mail Event
Figure 3-2 on page 3-3. See "Right-Click Action Menu
Description
Displays a pop-up window containing details of the event. See
Chapter 7, Event Details for more information.
Displays a new browser window that attempts to resolve the IP
address using a DNS lookup. Additional publicly-available web
sites that perform address resolution are provided as links on the
browser page.
Displays a new browser window that attempts to resolve the IP
address using a DNS lookup. Additional publicly-available web
sites that perform address resolution are provided as links on the
browser page.
Displays a page with the session information for the selected
event. Applicable to TCP events.
Provides a download of a PCAP capture file. This file contains the
traffic between the source and destination IP addresses of the
event for the day the event was generated. Applicable to any TCP
event that supports the Dragon mktcpdump CLI tool.
Refer to Chapter 8, Viewing a PCAP File for an Event
information.
Opens your mail application with the URL for the event in the
content field of the message.
Enterasys IPS Analysis and Reporting Guide 3-3
Event Log Report
Options" on page 3-3 for
Chapter 6, Event Table
for more
Pane.