Enterasys Intrusion Prevention System, Reporting Manual

Page: 96 / 122

Using the Realtime Console Legacy Reporting
11-8 Enterasys IPS Analysis and Reporting Guide
event group in that period of time, a group icon is used for representation. Figure 11-6 is an
example of the type of data generated by this tool.
Figure 11-6 Realtime Tool ChartGroups Output
GraphEvents and GraphScores
The GraphEvents and GraphScores event summaries print out a quick, low-resolution graph of
the recent activity. The graphs are designed for fast downloading. Graphing of total events or
scores is achieved. For events, a simple count of matching events is considered when plotting the
graph. For scores, the total accumulative sum of each event’s score for that time period is used to
determine the score for that area. Clicking on any portion of the graph brings you to that area’s
corresponding event summary.
Figure 11-7 is an example graph of port 80 events over the last 48
hours.