Our company exports the router, and sometimes I logged on to see the situation, the log will find different IP UDP flood attack, lost XXX message, and then my machine for a certain attack IP caught, discovery is like that, as of today, for the machine caught or such



But I caught for router, accounting for 95% of the packages are ARP, is typically the case


Excuse me, figure a machine is what's the problem? If so, how to solve?
Figure 2, is a normal router should have caught the results?
Thank you very much!