HP VPN Firewall Appliances Attack Protection Command Reference

32
Default command level
2: System view
Parameters
destination-ip: Collects statistics on packets sent out of the security zone by destination IP address.
inbound: Collects statistics on packets to the security zone.
outbound: Collects statistics on packets sent out of the security zone.
source-ip: Collects statistics on packets to the security zone by source IP address.
Usage guidelines
Multiple types of traffic statistics collections can be enabled for a security zone. The collection results can
be viewed by related display commands.
Examples
# In security zone trust, enable traffic statistics collection by destination IP address.
<Sysname> system-view
[Sysname] zone name trust id 2
[Sysname-zone-trust] flow-statistics enable destination-ip
# You can use the following command to display statistics on packets sent out of the security zone with
the destination IP address being 2.2.2.2. (You can specify the destination IP address as needed.)
[Sysname-zone-trust] display flow-statistics statistics destination-ip 2.2.2.2
Related commands
display flow-statistics statistics
reset attack-defense statistics zone
Use reset attack-defense statistics zone to clear the attack protection statistics of a security zone.
Syntax
reset attack-defense statistics [ vd vd-name ] zone zone-name
Views
User view
Default command level
1: Monitor level
Parameters
vd vd-name: Clears the attack protection statistics of a specific VD. The vd-name argument refers to the
VD name, a case-insensitive string of 1 to 20 characters. If you do not specify this option, this command
clears the attack protection statistics of the default VD.
zone zone-name: Specifies a security zone. The zone-name argument refers to security zone name, a
case-insensitive string of 1 to 20 characters.
Examples
# Clear the attack protection statistics of security zone trust.
<Sysname> reset attack-defense statistics zone trust
# Clear the attack protection statistics of security zone trust on VD vdtest.