HP VPN Firewall Appliances Attack Protection Command Reference

27
Table 3 Command output
Field Descri
p
tion
Blacklist Whether the blacklist function is enabled.
Blacklist items Number of blacklist entries.
IP IP address of the blacklist entry.
Type
Type of the blacklist entry:
• manual—The entry was added manually.
• auto—The entry was added automatically by the scanning attack
protection function.
Aging started Time when the blacklist entry is added.
Aging finished
Aging time of the blacklist entry. Never means that the entry never gets
aged.
Dropped packets Number of packets from the IP address that have been dropped.
Related commands
• blacklist enable
• blacklist ip
display flow-statistics statistics
Use display flow-statistics statistics to display traffic statistics on interfaces based on IP addresses.
Syntax
display flow-statistics statistics { destination-ip dest-ip-address | source-ip src-ip-address } [ vpn-instance
vpn-instance-name ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
destination-ip dest-ip-address: Displays statistics of the traffic destined for the specified destination IP
address. dest-ip-address indicates the destination IP address, which cannot be a broadcast address,
127.0.0.0, a class D address, or a class E address
source-ip src-ip-address: Displays statistics of the traffic that is from the specified source IP address.
src-ip-address indicates the source IP address, which cannot be a broadcast address, 127.0.0.0, a class
D address, or a class E address.
vpn-instance vpn-instance-name: Displays statistics of the traffic that belongs to the specified VPN.
vpn-instance-name indicates the VPN instance name of a VPN, a case-sensitive string of 1 to 31
characters. If the object to be displayed belongs to the public network, do not specify this option.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Getting Started Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.