R3303-HP HSR6800 Routers Security Command Reference

459
slot slot-number: Displays information about the blacklist entries on a card. slot-number specifies the
number of the slot that holds the card. If you do not specify this option, this command displays
information about blacklist entries on all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Displays information about the blacklist entries on a card of an
IRF member device. The chassis-number argument refers to the ID of the IRF member device. The
slot-number argument refers to the number of the slot where the card resides. (In IRF mode.)
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information about all blacklist entries.
<Sysname> display blacklist all
Blacklist information
------------------------------------------------------------------------------
Blacklist : enabled
Blacklist items : 1
------------------------------------------------------------------------------
IP Type Aging started Aging finished Dropped packets
YYYY/MM/DD hh:mm:ss YYYY/MM/DD hh:mm:ss
Total blacklist items on slot 0 : 3
2.2.1.2 manual 2008/08/27 19:15:39 Never 0
1.1.1.2 auto 2008/09/01 18:26:31 2008/09/01 18:36:31 4294967295
1.1.1.3 manual 2008/09/02 06:13:20 2008/09/02 07:54:47 4294967295
--------------------------------------------------------------------------
Table 75 Command output
Field Descri
p
tion
Blacklist Indicates whether the blacklist function is enabled.
Blacklist items Number of blacklist entries.
IP IP address of the blacklist entry.
Type
Type of the blacklist entry:
• manual—The entry was added manually.
• auto—The entry was added automatically by the scanning attack
protection function.
Aging started Time when the blacklist entry is added.
Aging finished
Aging time of the blacklist entry. Never means that the entry never gets
aged.
Dropped packets Number of packets from the IP address that have been dropped.
Total blacklist items on slot 0 Number of blacklist entries on slot 0.