Symantec 10521146 - Network Security 7120, Руководство администратора

Страница: 238 / 392

238 Reporting
Querying flows
Note: SuperUsers, Administrators, and StandardUsers can view flow data;
RestrictedUsers cannot. See “User groups reference” on page 319 for more
about permissions.
Viewing current flows
View Current Flows enables you to search against all of the collected flows by
FlowChaser. These flows are stored in memory so they are not persistent.
To query current flows
1 In the Network Security console, click Flows > View Current Flows .
2 In Current Flow Data , select one of the following tabs:
■
Match Source and Destination : This will make a more focused query
on specific source and destination IPs.
■
Match Either Source or Destination : This will make a broader query on
either a source IP or a destination IP.
3 In Match Source and Destination , you can display flows that pertain only to
specific source IPs and destination IPs. To make this a more focused query,
enter data in the following fields:
■
Source IP : Numeric IP address
■
Prefix Len : Mask of the IP address in integers between 1 and 32
■
Port : Valid port number
■
Destination IP : Numeric IP address
■
Prefix Len : Mask of the IP address in integers between 1 and 32
■
Port : Valid port number
4 In Match Either Source or Destination , you can display flows that pertain
to either a source IP or a destination IP. To make this a broader query, enter
data in the following fields:
■
Source or Destination IP : Numeric IP address
■
Prefix Len : Mask of the IP address in integers between 1 and 32
■
Port : Valid port number