Cisco Systems IPS4510K9 manual Table B-11 Fixed TCP Engine Parameters

Appendix B Signature Engines

Fixed Engine

Table B-10	Fixed ICMP Engine Parameters (continued)
Parameter		Description	Value
specify-icmp-type {yes no}		(Optional) Enables inspection of the	0 to 65535
		Layer 4 ICMP header type:
		• icmp-type—Specifies the value of the
		ICMP header TYPE.
swap-attacker-victim		Swaps the attacker and victim addresses	false true (default)
		and ports (source and destination) in the
		alert message and in any actions taken.

Table B-11lists the parameters specific to the Fixed TCP engine.

Table B-11	Fixed TCP Engine Parameters
Parameter		Description		Value
direction		Specifies the direction of traffic:		from-service
		• Traffic from service port destined to		to-service
			client port.
		• Traffic from client port destined to
			service port.
max-payload-inspect-length		Specifies the maximum inspection depth		1 to 250
		for the signature.
regex-string		Specifies the regular expression to search		string
		for in a single packet.
specify-exact-match-offset		(Optional) Enables exact match offset:		0 to 65535
{yes no}		•	exact-match-offset—Specifies the
			exact stream offset the regex-string
			must report for a match to be valid.
specify-min-match-length {yes		(Optional) Enables minimum match length:		0 to 65535
no}		•	min-match-length—Specifies the
			minimum number of bytes the
			regex-string must match.
exclude-service-ports {yes		Enables service ports for use:		0 to 655351
no}		•	excluded-service-ports—Specifies a	a-b[,c-d]
			comma-separated list of ports or port
			ranges to exclude.
swap-attacker-victim		Swaps the attacker and victim addresses		false true (default)
		and ports (source and destination) in the
		alert message and in any actions taken.

1. The second number in the range must be greater than or equal to the first number.

	Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01		B-31