Cisco Systems IPS4510K9 manual Parameter Description Value

Appendix B Signature Engines

Atomic Engine

		Table B-9	Atomic IP Engine Parameters (continued)
		Parameter		Description		Value
		specify-ip-id {yes no}		(Optional) Enables inspection of the IP		0 to 255
				identifier:
				• ip-id—Specifies the IP ID to
					inspect.
		specify-ip-option-inspection {yes		(Optional) Enables inspection of the IP		0 to 65535
		no}		options:
				• ip-option-inspection—Specifies
					the value of the IP option:
					– ip-option—Specifies the IP
					OPTION code to match.
					– ip-option-abnormal—Specifies
					the list of options is
					malformed.
		specify-ip-payload-length {yes no}		(Optional) Enables inspection of the IP		0 to 65535
				payload length:
				•	ip-payload-length—Specifies the
					length of IP payload to inspect.
		specify-ip-tos {yes no}		(Optional) Specifies the IP type of		0 to 6 255
				service:
				• ip-tos—Specifies the IP type of
					service to inspect.
		specify-ip-total-length {yes no}		(Optional) Enables inspection of the IP		0 to 65535
				total length:
				•	ip-total-length—Specifies the
					total length of IP packet to inspect.
		specify-ip-ttl {yes no}		(Optional) Enables inspection of IP		0 to 255
				time-to-live:
				• ip-ttl—Specifies the value of the
					IP TTL to inspect.
		specify-ip-version {yes no}		(Optional) Enables inspection of the IP		0 to 16
				version:
				• ip-version—Specifies which IP
					version to inspect.
		specify-l4-protocol {yes no}		(Optional) Enables inspection of the		icmp
				Layer 4 protocol:		tcp
				•	l4-protocol—Specifies which	udp
					Layer 4 protocol to inspect.
						other-protocol
		specify-icmp-code {yes no}		(Optional) Enables inspection of the		0 to 65535
				Layer 4 ICMP code:
				• icmp-code—Specifies the value of
					the ICMP header CODE.
	Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
B-26						OL-29168-01