Cisco Systems IPS4510K9 manual Sig-name

Appendix B Signature Engines

Master Engine

Table B-1	Master Engine Parameters (continued)
Parameter		Description		Value
alert-severity		Specifies the severity of the alert:		high
		•	Dangerous alert	medium
		•	Medium-level alert	low
		•	Low-level alert	informational (default)
		•	Informational alert
sig-fidelity-rating		Specifies the rating of the fidelity of this signature.		0 to 100
				(default = 100)
promisc-delta		Specifies the delta value used to determine the		0 to 30
		seriousness of the alert.		(default = 5)
sig-name		Specifies the name of the signature.		sig-name
alert-notes		Provides additional information about this signature		alert-notes
		that will be included in the alert message.
user-comments		Provides comments about this signature.		comments
alert-traits		Specifies traits you want to document about this		0 to 65335
		signature.
release		Provides the release in which the signature was most		release
		recently updated.
signature-creation-d		Specifies the date the signature was created.		—
ate
signature-type		Specifies the signature category.		anomaly
				component
				exploit
				other
				vulnerability
engine		Specifies the engine to which the signature belongs.		—
		Note The engine-specific parameters appear under
			the engine category.
event-count		Specifies the number of times an event must occur		1 to 65535
		before an alert is generated.		(default = 1)
event-count-key		Specifies the storage type on which to count events		Axxx
		for this signature:		AxBx
		•	Attacker address	Axxb
		• Attacker and victim addresses		xxBx
		• Attacker address and victim port		AaBb
		•	Victim address
		• Attacker and victim addresses and ports

Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2

OL-29168-01 B-5