The ips log based-on-session command configures IPS threat logs to record source and destination IP addresses by session.
The undo ips log based-on-session command configures IPS threat logs to record source and destination IP addresses by packet.
By default, IPS threat logs record source and destination IP addresses by packets. The source and destination IP addresses in IPS threat logs are the source and destination IP addresses of packets.
After you run the ips log based-on-session command to configure IPS threat logs to record source and destination IP addresses by session, the source and destination IP addresses in IPS threat logs are the source and destination IP addresses of the sessions with threat packets.