display deception ip-state

Function

The display deception ip-state command displays the online status of IP addresses scanned by the DecoySensor.

Format

display deception ip-state [ ip-address ] [ verbose ]

Parameters

Parameter	Description	Value
ip-address	Specifies an IP address.	The value is in dotted decimal notation.
verbose	Displays the detailed online status of IP addresses.	-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

A DecoySensor checks the online status of IP addresses every 30 minutes. If traffic destined for address A is deceived, the interval for checking the online status of address A is shortened to 10 to 110 seconds to minimize the adverse impact on network services. The interval depends on the number of deceived source addresses. More source addresses result in a longer interval.

The IP addresses scanned by the DecoySensor must be on the detected network segment, and the DecoySensor has an IP address belonging to this network segment.

The display deception ip-state command output does not contain the IP address online status if the deception detect-network command is not used to set any detected network segment.

The reset deception ip-state command clears the IP address online status and immediately initiates the check on the online status of IP addresses.

Example

# Display the online status of IP addresses scanned by the DecoySensor.

<FW> display deception ip-state
--------------------------------------------------------------------------------
Current total number = 255                                                        
--------------------------------------------------------------------------------
ip-address       state     vlan    vpn-instance                                 
--------------------------------------------------------------------------------
1.1.1.1          online    0       public                                       
1.1.1.2          offline   0       public                                       
1.1.1.3          offline   0       public                                       
...                                                                             
1.1.1.255        online    0       public                                       
--------------------------------------------------------------------------------

**Table 1** Description of the **display deception ip-state** command output
Item	Description
ip-address	IP address
state	IP address online status: online offline
vlan	VLAN to which the IP address belongs
vpn-instance	VPN instance of the IP address

# Display the detailed online status of IP addresses scanned by the DecoySensor.

<FW> display deception ip-state verbose
--------------------------------------------------------------------------------
Current total number = 1                                                       
--------------------------------------------------------------------------------
2.2.2.1 information:                                                            
--------------------------------------------------------------------------------
state               :offline                                                    
vlan                :0                                                          
vpn-instance        :public                                                     
proxy_flag          :0                                                          
on2off_flag         :0                                                          
redirect_num        :0                                                          
--------------------------------------------------------------------------------

**Table 2** Description of the **display deception ip-state verbose** command output
Item	Description
ip-address information	Detailed information about an IP address
state	IP address online status: online offline
vlan	VLAN to which the IP address belongs
vpn-instance	VPN instance of the IP address
proxy_flag	Whether the IP address is learned through ARP proxy: 0: No 1: Yes
on2off_flag	Whether the IP address changes from online to offline: 0: No 1: Yes
redirect_num	Number of deceived source IP addresses that scanned this IP address