By default, sub-sampling is enabled due to which the packet count in DoS alerts shows lower than that of the actual attack, on UDP traffic. You can disable or enable sub-sampling using this command.
Syntax:
dossampling <enable|disable> <inbound|outbound>
Example:
dossampling enable inbound
dossampling enable outbound
dossampling disable inbound
dossampling disable outbound
Applicable to:
NS-series Sensors