This dialog window allows you
to configure the alert list for various types of incoming and
outgoing connections.
The following alert types are
available:
·
|
Incoming connection from a specified IP
address or range of IP addresses.
|
·
|
Incoming connection to a specified local
port or range of local ports.
|
·
|
Outgoing connection to a specified IP
address or range of IP addresses.
|
·
|
Outgoing connection to a specified remote
port or range of remote ports.
|
In order to create a new alert,
click on the Add Record
button.
Action
– choose the action that
will take place once the alert is triggered: Play Sound
– play the sound file. Choosing
the Ignore
option will make the program
exclude a certain type of connection from the alert list. For
example, if you would like to monitor all incoming connections but
to the local port 80, you can define an alert where the connection
type is Incoming and the local port number is 80, and choose
the Ignore
action for it. Please note,
that the alert function is looking for the first occurrence of a
connection matching the specified alert; therefore, the excluded
alert must be the first in the list of alerts, otherwise it will
not be read by the program and all connections to port 80 will
still trigger the alarm.
Remote IP
Addresses – one or
several IP addresses, or the range of addresses, a connection from
which will trigger an alert. If the Any Address
box is checked, then any
connection will trigger an alert.
Local
Ports,
Remote
Ports – one or several
local or remote ports, or a range of ports can be specified. If the
box Any Port
is checked, then any local or
remote port, depending on the connection type, indicated in
Connection Type will trigger the alert.
After the alert is created you
can edit it by double-clicking on it in the list of alerts. You can
change the order in which the alerts are read by the program using
the Move Up
and Move Down
buttons. You can delete an
alert by clicking on the Clear Selected
button.
The alerts are read in the
descending order. The search is finished with the first match; all
remaining alerts are not evaluated.
Check the Disable Alerts
box in the Alerts window to
temporarily disable all alerts.
|