Cisco Cisco FirePOWER Appliance 7115

Version 5.3

Sourcefire 3D System User Guide

670

Working with Intrusion Events

Using the Packet View

Chapter 17

The 

 table describes the actions you can take in the packet 

view.

Packet View Actions 

modify the date and 

time range in the 

packet views

find more information in 

learn more about the 

information 

displayed in the 

packet view

find more information in:
•

add an event to the 

clipboard so you can 

transfer it to the 

incidents at a later 

time

either:
• click Copy to copy the event whose packet you are viewing

• click Copy All to copy all the events whose packets you previously selected
The clipboard stores up to 25,000 events per user. For more information on 

the clipboard, see 

delete an event from 

the event database

either:
• click Delete to delete the event whose packet you are viewing

• click Delete All to delete all the events whose packets you previously 

selected

mark an event 

reviewed to remove 

it from event views, 

but not the event 

database.

either:
• click Review to review the event whose packet you are viewing

• click Review All to review all the events whose packets you previously 

selected 

For more information, see 

 on page 659. Note that 

reviewed events continue to be included in the event statistics on the 

Intrusion Event Statistics page.