Enterasys Intrusion Prevention System, Руководство по отчетности

Страница: 51 / 122

24 Hours Reports Event Log Report
Enterasys IPS Analysis and Reporting Guide 3-3
Right-clicking on an event displays a menu of further actions that can be applied to the event, as
shown in
Figure 3-2 on page 3-3. See “ Right-Click Action Menu Options ” on page 3-3 for
descriptions of the options.
Single clicking on a data group in the charts or table view causes details of the event to display in
the Event Table pane. The Event Table pane is described in detail in
Chapter 6, Event Table Pane .
Figure 3-2 Event Log Report
Table 3-2 Right-Click Action Menu Options
Option Description
Event Details Displays a pop-up window containing details of the event. See
Chapter 7, Event Details for more information.
Source Address Lookup Displays a new browser window that attempts to resolve the IP
address using a DNS lookup. Additional publicly-available web
sites that perform address resolution are provided as links on the
browser page.
Destination Address Lookup Displays a new browser window that attempts to resolve the IP
address using a DNS lookup. Additional publicly-available web
sites that perform address resolution are provided as links on the
browser page.
Session Rebuild Displays a page with the session information for the selected
event. Applicable to TCP events.
Download PCAP Provides a download of a PCAP capture file. This file contains the
traffic between the source and destination IP addresses of the
event for the day the event was generated. Applicable to any TCP
event that supports the Dragon mktcpdump CLI tool.
Refer to
Chapter 8, Viewing a PCAP File for an Event for more
information.
Mail Event Opens your mail application with the URL for the event in the
content field of the message.