Viewing the Source IP Address Monitoring Table
Usage Scenario
In a scenario of transparent traffic transmission without defense, check whether a source IP address is whitelisted.
Check whether a source IP address monitoring table is added in source authentication.
Command
View |
Command |
|---|---|
All views |
display anti-ddos source-ip [ slot slot-id cpu cpu-id ] [ ip ip-address | ipv6 ipv6-address ] [ vpn-instance vpn-instance-name ] |
Example
[AntiDDoS] display anti-ddos source-ip ip 172.16.12.128
IPv(4): 172.16.12.128, VRF: 0, CurrentTime: 62158 ProxyFlag: 0
Create reason detail information: 0x1
SourceDetect: 1, HTTPURI: 0
IFHTTPBLACKLIST: 0, FilterGlbBL: 0
Whitelist reason detail information: 0x70
TimePass: 0, AgingTime: 60, TTL: 125, LastReboundTime: 61422
Basic: 1, Syn-Adv: 1, SynAck: 1, HTTP : 0
Query: 0, Reply : 0, SIP : 0, HTTPS: 0
HTTPIMG: 0, ReplyStat: 0, UDPRlt: 0, Filter: 0
HTTPSrcDetectPass: 0
TCPRatioAtkFlag: 0
ConnectionFlood information: Indicates the TCP connection flood statistics information.
ConnectionfloodTimestamp: 0, SourceConnectionTimestamp: 0
SourceConnectionRate : 0, Indicates the number of new connections from a source. ConnectionNum: 0 Indicates the number of concurrent connections from a source.
HTTP Flood information:
StartLearnTimestamp: 0, LearnTimestamp: 0
FP: 0, 0, 0, 0 Counte: 0, 0, 0, 0 Indicates the source fingerprint information and number of times it is matched.
HttpSrcStatRedirFlag: 0 Indicates whether redirection is performed for packets from a source.
HttpSrcStatPps: 0 Indicates the source PPS count.
HttpSrcStatQps: 0 Indicates the source QPS count.
HTTPS Flood information:
HTTPSCheckTimes : 0 Indicates the number of source Hello packet check errors.
SSLAbnSessNum : 0 Indicates the number of abnormal SSL sessions.
HttpsSrcStatRedirFlag: 0 Indicates whether redirection is performed for packets from a source.
Slow attack information: Indicates the TCP connection slow attack.
Alike: 0, (Indicates the number of similar connections.) Delta: 0, Count: 0, PassTime: 0, NextRise: 0
DestZone Slow attack information:
Alike: 0, Delta: 0, Count: 0, PassTime: 0, NextRise: 0
PassTime: 00000000, AllUrl: 000000,(Indicates the number of times all URLs are accessed.) MonUrl: 000000,(Indicates the number of times monitored URLs are accessed.) LastRatio 000000 (Indicates the access ratio in the last time interval.)
DNS Cache Information Indicates smart DNS statistics.
ViewName:
Parameter Description
Parameter |
Sub-Parameter |
Description |
|---|---|---|
Create reason detail information: Why a source IP address monitoring table is created. |
SourceDetect |
Whether the whitelist is generated in source detection. |
HTTPURI |
Whether the source monitoring table is used in URI monitoring. |
|
IFHTTPBLACKLIST |
Whether the blacklist is an interface HTTP blacklist. |
|
FilterGlbBL |
Whether the blacklist is generated by the global filter. |
|
Whitelist reason detail information: Why an IP address is whitelisted. |
TimePass |
Number of seconds elapsed since the IP address was whitelisted. |
AgingTime |
Number of seconds left before the whitelist ages. |
|
LastReboundTime |
Last rebound time. |
|
Basic: 1, |
Whitelist added in SYN basic source authentication. |
|
Syn-Adv: 0, |
Whitelist added in SYN advanced source authentication. |
|
SynAck: 0, |
Whitelist added in SYN-ACK source authentication. |
|
HTTP : 0 |
Whitelist added in HTTP redirection source authentication. |
|
Query: 0, |
Whitelist added in DNS query source detection. |
|
Reply : 0, |
Whitelist added in DNS reply source detection. |
|
SIP : 0, |
Whitelist added in SIP source authentication. |
|
HTTPS: 0 |
Whitelist added in HTTPS source authentication. |
|
HTTPIMG: 0, |
Whitelist added in HTTP verification code-based defense mode. |
|
HTTPSrcDetectPass: 0 |
Flag of no HTTP source authentication. |
|
TCPRatioAtkFlag: 0 |
Flag of source IP traffic anomaly in TCP-ratio defense. |
