Ruijie RG-S2900G-E Series - Page 752

Configuration Guide NFPP Configuration
The following example shows the NFPP syslog number in the log-buffer area:
Ruijie#show nfpp log buffer statistics
There are 6 logs in buffer.
The following example shows the NFPP syslog buffer area:
Ruijie#show nfpp log buffer
Protocol VLAN Interface IP address MAC address Reason Timestamp
------- ---- -------- --------- ----------- ------ ---------
ARP 1 Gi0/1 1.1.1.1 - DoS 2009-05-30 16:23:10
ARP 1 Gi0/1 1.1.1.1 - ISOLATED 2009-05-30 16:23:10
ARP 1 Gi0/1 1.1.1.2 - DoS 2009-05-30 16:23:15
ARP 1 Gi0/1 1.1.1.2 - ISOLATE_FAILED 2009-05-30 16:23:15
ARP 1 Gi0/1 - 0000.0000.0001 SCAN 2009-05-30 16:30:10
ARP - Gi0/2 - - PORT_ATTACKED 2009-05-30 16:30:10
Field
Description
Protocol
Includes ARP、IP、ICMP、DHCP、DHCPv6、
NS-NA、RS、RA-REDIRECT
Reason
Includes DoS 、 ISOLATED 、
ISOLATED_FAILED 、 SCAN 、
PORT_ATTACKED.
Caution
If the syslog buffer area is full, the subsequent syslog will be
discarded and an entry with all attributes “-” will be shown in the
syslog buffer area. The administrator shall increase the capacity
of the syslog buffer area or improve the rate of generating the
syslog.
The syslog that generated from the syslog buffer area carries
with the event timestamp, for example:
%NFPP_ARP_GUARD-4-DOS_DETECTED:
Host<IP=N/A,MAC=0000.0000.0004,port=Gi4/1,VLAN=1> was
detected.(2009-07-01 13:00:00)