< Home

display anti-apt statistics

Function

The display anti-apt statistics command displays the statistics about file reputation detection and malicious URL detection in APT defense.

Format

display anti-apt statistics [ slot slot-id cpu cpu-id ]

Parameters

Parameter Description Value

slot slot-id

Specifies the slot ID of the SPU. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.

-

cpu cpu-id

Specifies the CPU ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

None

Example

# Display the statistics about file reputation detection and malicious URL detection in APT defense.
<sysname> display anti-apt statistics                                                                                      
2018-04-28 10:45:23.300                                                         
Anti-APT Statistics Table                                                       
------------------------------------------------------------------------------  
  Matched Malicious URL  :          0                                           
------------------------------------------------------------------------------  
  File-Reputation Event statistic:                                              
------------------------------------------------------------------------------  
    Total Alert Events  :          0                                            
    Total Block Events  :          0                                            
  ----------------------------------------------------------------------------  
    Application                 Alert Events                  Block Events      
  ----------------------------------------------------------------------------  
    HTTP                                   0                             0      
    HTTPS                                  0                             0      
    FTP                                    0                             0      
    SMTP                                   0                             0      
    POP3                                   0                             0      
    IMAP                                   0                             0      
    NFS                                    0                             0      
    SMB                                    0                             0      
------------------------------------------------------------------------------  
                                                                                
  File-Reputation File statistic:                                               
------------------------------------------------------------------------------  
    Total File  :                  2                                            
  ----------------------------------------------------------------------------  
    Application                         File                                    
  ----------------------------------------------------------------------------  
    HTTP                                   0                                    
    HTTPS                                  0                                    
    FTP                                    2                                    
    SMTP                                   0                                    
    POP3                                   0                                    
    IMAP                                   0                                    
    NFS                                    0                                    
    SMB                                    0                                    
------------------------------------------------------------------------------  
Table 1 Description of the display anti-apt statistics command output

Item

Description

Matched Malicious URL

Number of matched malicious URLs.

File-Reputation Event statistic

Statistics about file reputation detection events.

Total Alert Events

Total number of alert events, including SMTP, POP3, and IMAP announcement events.

Total Block Events

Total number of block events, including SMTP, POP3, and IMAP attachment deletion events.

Application

File protocol type.

Alert Events

Number of file protocol alert events. For SMTP, POP3, or IMAP, file protocol alert events includes announcement events.

Block Events

Number of file protocol block events. For SMTP, POP3, or IMAP, file protocol block events includes attachment deletion events.

File-Reputation File statistic

File statistics in file reputation detection.

Total File

Total number of received files.

File

Number of files received by the current file protocol.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >