Juniper J-Series Administration Manual page 161

Table 71: Summary of Key Stateful Firewall Filters Output Fields (continued)
Field Values
Direction Direction of the flow:
Frames Number of frames in the flow.
Monitoring Firewall Intrusion Detection Services (IDS)
To view intrusion detection service (IDS) information for stateful firewall filters, select
Monitor>Firewall>IDS Information. Click one of the following criteria to order the
display accordingly:
To limit the display of IDS information, type or select information in one or more of
the Narrow Search boxes listed in Table 72 on page 139, and click OK.
Table 72: IDS Search-Narrowing Characteristics
Narrow Search Box
Destination Address
IDS Table
Number of IDS Entries to
Display
Threshold
Service Set
Alternatively, enter the following CLI
(input) or (output).
I O
Bytes (received bytes)
Packets (received packets)
Flows
Anomalies
Entry or Selection
Type a destination address prefix to display IDS information for only that prefix.
Select one of the following:
Destination—Displays information for an address under attack.
Pair—Displays information for a suspected attack source and destination pair.
Source—Displays information for an address that is a suspected attacker.
Select a number between 25 and 500 to display only a particular number of entries.
Type a number to display events with only that number of bytes, packets, flows, or
anomalies—whichever you selected to order the display. For example, to display all events
with more than 100 flows, click Flows and then type
Select a service set to display information for only the set.
show services ids destination-table
show services ids source-table
show services ids pair-table
Chapter 7: Monitoring the Router and Routing Operations
in the Threshold box.
100
commands:
show
Using the Monitoring Tools
139