DES-7200 Configuration Guide Chapter 12 NFPP Configuration
12-89
There are 6 logs in buffer.
The following example shows the NFPP syslog buffer area:
DES-7200#show nfpp log buffer
Protocol VLAN Interface IP address MAC address Reason Timestamp
------- ---- -------- --------- ----------- ------ ---------
ARP 1 Gi0/1 1.1.1.1 - DoS 2009-05-30 16:23:10
ARP 1 Gi0/1 1.1.1.1 - ISOLATED 2009-05-30 16:23:10
ARP 1 Gi0/1 1.1.1.2 - DoS 2009-05-30 16:23:15
ARP 1 Gi0/1 1.1.1.2 - ISOLATE_FAILED 2009-05-30 16:23:15
ARP 1 Gi0/1 - 0000.0000.0001 SCAN 2009-05-30 16:30:10
ARP - Gi0/2 - - PORT_ATTACKED 2009-05-30 16:30:10
Field Description
Protocol
Includes ARP、IP、ICMP、DHCP、DHCPv6、
NS-NA、RS、RA-REDIRECT
Reason
Includes DoS、ISOLATED、ISOLATED_FAILED、
SCAN、PORT_ATTACKED.
Cautio
n
If the syslog buffer area is full, the subsequent syslog will be
discarded and an entry with all attributes “-” will be shown in the
syslog buffer area. The administrator shall increase the capacity
of the syslog buffer area or improve the rate of generating the
syslog.
The syslog that generated from the syslog buffer area carries
with the event timestamp, for example:
%NFPP_ARP_GUARD-4-DOS_DETECTED:
Host<IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was
detected.(2009-07-01 13:00:00)