Cisco Cisco Firepower Management Center 4000

In the 

 field, enter the IP address or CIDR block/prefix length you want to specify 

as the source or destination IP address.

For information on using CIDR notation and prefix lengths in the FireSIGHT System, see 

.

Click 

.

The suppression options within your intrusion policies are modified according to your specifications. If 
you chose not to override existing settings, a message appears informing you of any conflicts.

Protection

On the packet view, click the arrow next to 

 to view information about the captured frame. The 

packet view may display a single frame or multiple frames. Each frame provides information about an 
individual network packet. You would see multiple frames, for example, in the case of tagged packets or 
packets in reassembled TCP streams. For information on tagged packets, see 

. For information on reassembled TCP streams, see 

The captured frame, where n is 1 for single-frame packets and the incremental frame number for 
multi-frame packets. The number of captured bytes in the frame is appended to the frame number.

The date and time the frame was captured.

For multi-frame packets, the elapsed time since the previous frame was captured.

For multi-frame packets, the elapsed time since the previous frame was displayed.

For multi-frame packets, the elapsed time since the first frame was captured.

The incremental frame number.

The length of the frame in bytes.

The length of the captured frame in bytes.

Whether the frame is marked (true or false).