NDR Sensor CLI

Associated Commands:

CLI Description	Command
Clear/Delete all management interfaces in the system Clears/Delete all management interfaces in the system. This only empties the management interface list and does not affect the underlying network interface.	clear management-interfaces
Clear/Delete all sniffing interfaces in the system Clears/Delete all sniffing interfaces in the system. No packets will be captured after clearing the sniffing interfaces. This only empties the sniffing interface list and does not affect the underlying network interface.	clear sniffing-interfaces
Delete a management interface from the system Delete a set management interface from the system. This only removes the interface from the management interface list, and does not delete the network interface from the system.	del management-interface <management-interface-arg>
Delete a sniffing interface from the system Delete a set sniffing interface from the system. This only removes the interface from the sniffing interface list, and does not delete the network interface from the system. Once removed from configuration, the sniffing on the interface will stop.	del sniffing-interface <sniffing-interface-arg>
Delete the IP address associated with the sniffing interface in the system Delete the IP address associated with the sniffing interface in the system.	del sniffing-interface-ip <sniffing-interface-arg>
List management interfaces in the system List all the network management interfaces in the system.	get management-interfaces
List sniffing interfaces in the system List all the network sniffing interfaces in the system.	get sniffing-interfaces
Set management interfaces in the system Set a specific management interface in the system. Once set, this interface can be used for managing the sensor. At least one management interface has to be set before configuring sniffing-interfaces.	set management-interface <available-for-management-interface-arg>
Set sniffing interfaces in the system Set a specific sniffing interface in the system. Once set, the network traffic from the sniffing interface will be captured to identify and alert on potential security threats and malicious activity.	set sniffing-interface <available-for-sniffing-interface-arg> [mode <sniffing-mode-arg> mtu <sniffing-mtu-arg>]
Set sniffing interface IP address in the system Set an IP address for an existing sniffing interface in the system. The IP address will enable the sniffing interface to just respond to basic ARP requests for both modes - NATIVE and COMPAT. Setting up of the IP address is required to do Encapsulated Remote Mirroring. IPv6 based functionality is not supported in this release.	set sniffing-interface-ip <sniffing-interface-arg> ip <sniffing-cidr46-notation>

Total commands: 10