ACG1000-AE防私接功能误报率很高

如果出现了误识别可以查看终端共享具体被什么机制识别为多终端

# display user-share check-info ip 192.168.1.100

=======================================================================

TCP timestamp       count      ctime     uptime   duration

=======================================================================

           100       1640    1214654    1215999       1345

-----------------------------------------------------------------------

======================================================================

wechat long connection                        sendpkts recvpkts    ctime   uptime duration      state     device

======================================================================

192.168.1.100:63496 -> 101.226.211.46:8080          13       18  1214654  1215904     1250  confirmed         pc

----------------------------------------------------------------------------------------------------------------

debug user-share可以查看共享识别过程

# debug user-share

basic   detail

# display log debug                             

<2018-09-28 17:02:16> 192.168.1.100 -> 101.226.211.46 ushare: wechat connection TCP 192.168.1.100:63496 -> 101.226.211.46:8080 update

<2018-09-28 17:02:16> 101.226.211.46 -> 192.168.1.100 ushare: wechat connection TCP 101.226.211.46:8080 -> 192.168.8.30:63496 update

<2018-09-28 17:03:39> 101.226.211.46 -> 192.168.1.100 ushare: wechat connection TCP 101.226.211.46:8080 -> 192.168.8.30:63496 update

<2018-09-28 17:07:28> 192.168.1.100 -> 120.52.33.34 ushare: application 360_Security_Centre ignored as audit_contentlen is zero

<2018-09-28 17:07:28> 120.52.33.34 -> 192.168.1.100 ushare: application 360_Security_Centre ignored as audit_contentlen is zero

出现误识别的时候可以查看对应ip地址被哪些机制阻断，阻断的时候看看识别情况