09-01-2016 08:04 AM
Hi everyone,
I need to know the diffrent between 'count' and 'repeat count' in the report. I found the description of 'repeat count' in the Admin Guide only, but can't found 'count'.
- Repeat Count (repeatcnt): Number of sessions with same Source IP, Destination IP, Application, and Subtype seen within 5 seconds; used for ICMP only
Does anyone have any details of this?
Best regards,
09-02-2016 05:55 AM - edited 09-02-2016 05:56 AM
Hi!
correct me if i'm wrong, but i think you're mixing the log field format with the available collumns in the reports
'count' is used in reports to count how many times a contextual object is seen in the timeframe of the report
while 'repeat count' is a log field that indicates only 1 log was written for X repeats of identical ICMP sessions in 5 seconds
09-07-2016 11:01 AM
As I (currently 😉 understand it "repeat count" is a single log entry but it informs that the same event occured x number of times within 5 seconds (like lets say you get a DDoS of incoming junk, instead of log each and every session you only log a few entries but inform that this happend x number of times - basically to save mgmtplane resources but mainly logspace).
Count is the number of log entries (rows) you have located.
09-02-2016 05:55 AM - edited 09-02-2016 05:56 AM
Hi!
correct me if i'm wrong, but i think you're mixing the log field format with the available collumns in the reports
'count' is used in reports to count how many times a contextual object is seen in the timeframe of the report
while 'repeat count' is a log field that indicates only 1 log was written for X repeats of identical ICMP sessions in 5 seconds
09-07-2016 11:01 AM
As I (currently 😉 understand it "repeat count" is a single log entry but it informs that the same event occured x number of times within 5 seconds (like lets say you get a DDoS of incoming junk, instead of log each and every session you only log a few entries but inform that this happend x number of times - basically to save mgmtplane resources but mainly logspace).
Count is the number of log entries (rows) you have located.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
