show ddos incidents

Ze command

Registry path

show ddos incidents

Usage

show ddos incidents

Mode

Read-only

Wire method

ze-show:ddos-incidents

Backends

any backend

Task support

optional: the MCP call is synchronous, which is the default

Subcommands

none: this command takes no subcommand

Pipes, always

json, ndjson, table, text, yaml, raw, no-more, save

Pipes, when the answer has rows

match, count, first, last, display, fill

Pipes, while streaming

log

Pipes, local process only

save

Description

Per incident: the target vector (prefix/proto/port), attack family, top
source addresses, peak pps/bps, start/end time, and whether it is still active.

Arguments

No command-specific arguments listed.