Narus nSystem - Alerts

Type: Severity:
From:To:

	Policy Violation	Timestamp
	Watchlist	2013-09-11T12:25:10-07:00
	Watchlist	2013-09-11T12:26:13-07:00
	Watchlist	2013-09-11T12:27:15-07:00
	Watchlist	2013-09-11T12:28:17-07:00
	Watchlist	2013-09-11T12:29:10-07:00
	Watchlist	2013-09-11T12:29:58-07:00

of 1

Acknowledge

Delete

Save as...

Summary
Detail

Alert ID:	12
Alert Type:	Watchlist
Severity:	Low
Policy Name:	Unauthorized Client
Start Date & Time:	2013-09-11T10:12:25:10-07:00
End Date & Time:	2013-09-11T10:12:25:11-07:00
Vector Name:	pt_http_uri
Vector Category:	L7
Source:	internet
Destination:	myserver
Alert Interval:	10
Description:	Servers using playing video
More rows:	false

Matching Rows:

Bytes Sent	Bytes Received
172168	168321
234514	142567
174315	83212
24310	13053
54324	23456
1721258	1561235
24315	16212
24310	13053
76324	32456
2221258	1161235
543224	231256
3721251	2331235
234514	142567
174315	83212
24310	13053
54324	23456
1721258	1561235
24315	16212
24310	13053
76324	32456
2221258	1161235
24315	16212

of 35

Policy: Unauthorized Client

Volumetric Threshold:

Aggregate Function:	Sum
Attribute:	Bytes Sent
Operator:	Great Than 2000

Attribute Conditions:

Attribute	Operator	Condition Type	Value
Platform	OPERATOR_EQUAL	AND	iOS
serverip	OPERATOR_NOT_EQUAL	OR	172.168.31.44

IP Ports

Server IP	Server Port	Client IP	Client Port
192.168.155.210	8081	10.0.0.245	8080
192.168.155.210	8081	10.0.0.250	8080
192.172.150.210	8081	10.0.0.122	8080
192.168.155.210	8081	10.0.0.245	8080
192.168.155.210	8081	10.0.0.250	8080
192.172.150.210	8081	10.0.0.122	8080
192.168.155.210	8081	10.0.0.245	8080
192.168.155.210	8081	10.0.0.250	8080
192.172.150.210	8081	10.0.0.122	8080
192.168.155.210	8081	10.0.0.245	8080
192.168.155.210	8081	10.0.0.250	8080
192.172.150.210	8081	10.0.0.122	8080

of 50

About nSystem

Version: 1.3

Support: support@narus.com

Profile

Change Password