z/OS Communications Server: IP Messages Volume 4 (EZZ, SNM)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZZ8657I

z/OS Communications Server: IP Messages Volume 4 (EZZ, SNM)
SC27-3657-01

EZZ8657I
TRMD ATTACK Interface flood statistics:date time,ifcname=ifcname,dipaddr=dipaddr,discardcnt=discardcnt,discardp=discardp,fldcnt=fldcnt,
sensorhostname=sensorhostname

Explanation

Intrusion Detection Services (IDS) interface flood statistics have been gathered. This message is issued only when statistics are requested in the policy action for the flood attack type. If exception statistics are requested, this message is written for a statistics interval only if an interface flood started during the statistics interval or continued into the statistics interval.

In the message text:
date
The date when the statistics were gathered.
time
The time when the statistics were gathered.
ifcname
The name of the interface.
dipaddr
An IP address assigned to the interface.
discardcnt
The number of packets received on the interface during the statistics interval that were discarded or not processed.
discardp
The percentage of the total packets received on the interface during the statistics interval that were discarded.
fldcnt
The number of interface flood conditions during the statistics interval.
sensorhostname
The fully qualified host name of the IDS sensor.

System action

Processing continues.

Operator response

None.

System programmer response

The system programmer can use this data to help determine the values to be used for the flood percentage value and the minimum discard value in the policy for the flood attack type.

Module

EZATRMD

Example

EZZ8657I TRMD ATTACK Interface flood statistics:07/16/2010 20:19:43.52,ifcname=OSA123,dipaddr=
9.67.120.3,discardcnt=521,discardp=18,fldcnt=1,sensorhostname=MVS123.tcp.company.com

Procedure name

WriteStatEntries

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014