Alcatel-Lucent 6850-48 参考指南
Network Security Commands
page 61-10
OmniSwitch CLI Reference Guide
September 2009
show netsec traffic
Displays anomaly specific traffic statistics.
show netsec [group {group-name | all} | port slot/port1[-port2]] [anomaly {anomaly_name | all}] traffic
Syntax Definitions
group-name
The name of the monitoring-group.
group all
Specifies all the monitoring-groups.
slot/port1
The slot number for the module and the physical port number on that
module (e.g., 3/1 specifies port 1 on slot 3).
module (e.g., 3/1 specifies port 1 on slot 3).
-port2
The last port number in a range of ports that you want to configure on
the same slot (e.g, 3/1-4 specifies ports 1-4 on slot 3).
the same slot (e.g, 3/1-4 specifies ports 1-4 on slot 3).
anomaly_name
The type of the anomaly.
anomaly all
Monitors all anomalies.
Defaults
By default, a list of all anomalies traffic is displayed.
Platforms Supported
OmniSwitch 6850, 6855, 9000, 9000E
Usage Guidelines
To display trafffic for a particular monitoring-group, specify only the group parameter.
Examples
-> show netsec anomaly all traffic
Slot
Port Anomaly Packet Curr-in Curr-out Last-in Last-out
----+----------------+-----------+---------+------------+----------+-----------
2/5 arp-addr-scan arp-rep - 0 - 0
2/5 arp-addr-scan arp-req 0 - 0 -
2/5 arp-flood arp-rep 0 0 0 0
2/5 arp-flood arp-req 0 - 0 -
2/5 arp-failure arp-rep - 0 - 0
2/5 arp-failure arp-req 0 - 0 -
2/5 icmp-addr-scan icmp-rep - 0 - 0
2/5 icmp-addr-scan icmp-req 0 - 0 -
2/5 icmp-flood icmp-rep - 0 - 0
2/5 icmp-flood icmp-req 0 0 0 0
2/5 icmp-unreachable icmp-dnr 0 0 0 0
2/5 tcp-port-scan syn-only 0 0 0 0
2/5 tcp-port-scan syn-ack 0 0 0 0
2/5 tcp-port-scan rst 0 0 0 0
2/5 tcp-addr-scan syn-only 0 - 0 -
2/5 tcp-addr-scan syn-ack - 0 - 0