NDR Sensor CLI

Associated Commands:

CLI Description Command

Clear/Delete all sniffing interfaces in the system


Clears/Delete all sniffing interfaces in the system. No packets will be captured after clearing the sniffing interfaces. This only empties the sniffing interface list and does not affect the underlying network interface.
clear sniffing-interfaces

Delete a sniffing interface from the system


Delete a set sniffing interface from the system. This only removes the interface from the sniffing interface list, and does not delete the network interface from the system. Once removed from configuration, the sniffing on the interface will stop.
del sniffing-interface <sniffing-interface-arg>

Delete the IP address associated with the sniffing interface in the system


Delete the IP address associated with the sniffing interface in the system.
del sniffing-interface-ip <sniffing-interface-arg>

List sniffing interfaces in the system


List all the network sniffing interfaces in the system.
get sniffing-interfaces

Set sniffing interfaces in the system


Set a specific sniffing interface in the system. Once set, the network traffic from the sniffing interface will be captured to identify and alert on potential security threats and malicious activity.
set sniffing-interface <available-for-sniffing-interface-arg> [mode <sniffing-mode-arg> mtu <sniffing-mtu-arg>]

Set sniffing interface IP address in the system


Set an IP address for an existing sniffing interface in the system. The IP address will enable the sniffing interface to just respond to basic ARP requests for both modes - NATIVE and COMPAT. Setting up of the IP address is required to do Encapsulated Remote Mirroring. IPv6 based functionality is not supported in this release.
set sniffing-interface-ip <sniffing-interface-arg> ip <sniffing-cidr46-notation>

Total commands: 6