Use Case Scenario

In a real use case, the command connection-show server-ip 10.9.10.117 was used to analyze a suspicious connections to server 10.9.10.117:

switch:                     switch02

vlan:                       1

client-ip:                  10.9.9.33

server-ip:                  10.9.9.107

service:                    http

dur(s):                     0

latency(us):                65

out-bytes:                  0

in-bytes:                   0

active:                     yes

switch:                     switch02

vlan:                       1

client-ip:                  10.9.9.33

server-ip:                  10.9.9.107

service:                    http

dur(s):                     210

latency(us):                7

out-bytes:                  48804

in-bytes:                   6120

active:                     yes

switch:                     switch02

vlan:                       1

client-ip:                  10.9.9.33

server-ip:                  10.9.9.107

service:                    http

dur(s):                     328

latency(us):                30

out-bytes:                  48720

in-bytes:                   612620

active:                     yes