show blat

Prev Next

Displays the blacklisted DNS traffic (blat) configuration and stats.

This command is not supported on SmartVision Edition appliances, which are Network Security appliances with SmartVision Edition licenses. The SmartVision Edition sensor is also called Trellix Network Security, SmartVision Edition.

Syntax

show blat {configuration | stats}

Parameters

None

Examples

The following example displays the blat configuration.

hostname # show blat configuration BLAT Enabled : yes

The following example displays the blat stats.

hostname # show blat stats
        Packet received :197292
        Static rules :28319
        Dynamic rules :0
        Inactive rules: 0
        Blacklist IP rules :0
        Static bad rules :0
        Dynamic bad rules :0
        Events reported :49
        Static :49
        Static (tcp) :0
        Dynamic :0
        Events dropped :0
        Inline dropped :0
        Inactive domain captured :60
        Blacklist IPs submitted :0
    

Output fields

The output fields for the show blat stats command are described below.

Packet received

Total number of packets received by blat.

Static rules

Total number of static rules in the rule file.

Dynamic rules

Total number of dynamic rules added.

Inactive rules

Total number of inactive rules.

Blacklist IP rules

Total number of rules that blacklist IP addresses.

Static bad rules

Total number of static rules that have an error in them.

Dynamic bad rules

Total number of dynamic rules that have an error in them.

Events reported

Total number of events and alerts reported.

Events dropped

Total number of events and alerts dropped.

Inline dropped

Total number of inline packets dropped.

Inactive domain captured

Total number of inactive DNS domains captured.

Blacklist IPs submitted

Total number of blacklisted IP addresses seen.