display deception arp-request

Function

The display deception arp-request command displays IP scanning conditions.

Format

display deception arp-request [ source ip-address ]

Parameters

Parameter	Description	Value
source ip-address	Specifies the source IP address that initiates IP scanning.	The value is in dotted decimal notation.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

Based on the IP scanning conditions, you can set a more precise IP scanning threshold.

If the rate of a source IP address is lower than the threshold but the number value is large, a patient hacker may be using this address.

Example

# Display IP scanning conditions.

<FW> display deception arp-request
--------------------------------------------------------------------------------
Current total number = 2                                                        
--------------------------------------------------------------------------------
source           rate(num/10s)    number       vlan   vpn-instance              
--------------------------------------------------------------------------------
1.1.1.1          4                231          0      public                    
1.1.1.2          1                280          0      public                    
--------------------------------------------------------------------------------

**Table 1** Description of the **display deception arp-request** command output
Item	Description
source	Source IP address that initiates IP scanning
rate(num/10s)	IP scanning rate, in "times per 10 seconds"
number	Number of IP scanning times
vlan	VLAN to which the IP address belongs
vpn-instance	VPN instance of the IP address