Welcome, Guest [Login]
Traffic Sentinel
Filter:

ICMP Port Unreachable
Section
Description
incl (optional)
Exclude Protocol (optional)
Attacker
Victim
Interval (?)
Truncate
Severity
Notification Cache
Show
Threshold (optional)
Where (optional) (?)

Usage: Set Notification Cache interval to suppress duplicate events, only generating an event when a new host is detected, or resumes having been silent for the Notification Cache interval. To continuously monitor for scanning activity, include this section in a report and schedule the report to run at a frequency corresponding to the specified interval.