Cisco Systems IPS4510K9 Service TNS Engine

B-59
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Appendix B Signature Engines
Service Engines
For More Information
For more information on the parameters common to all signature engines, see Master Engine, page B-4.
Service TNS Engine
The Service TNS engine inspects TNS protocol. TNS provides database applications with a single
common interface to all industry-standard network protocols. With TNS, applications can connect to
other database applications across networks with different protocols. The default TNS listener port is
TCP 1521. TNS also supports REDIRECT frames that redirect the client to another host and/or anothe r
TCP port. To support REDIRECT packets, the TNS engine listens on all TCP ports and has a quick TNS
frame header validation routine to ignore non-TNS streams.
Tabl e B-31 lists the parameters specific to the Service TNS engine
.
1. The second number in the range must be greater than or equal to the first number.
TableB-31 Service TNS Engine Parameters
Parameter Description Value
direction Specifies the direction of traffic:
• Traffic from service port destined to client port.
• Traffic from client port destined to service port.
from-service
to-service
specify-regex-string {yes |
no}
(Optional) Enables using a regular expression string:
• regex-string—Specifies the regular expression
to search for.
string
specify-exact-match-offset
{yes | no}
Enables the exact match offset:
• exact-match-offset—Specifies the exact stream
offset the regex-string must report for a match to
be valid.
0 to 65535
specify-max-match-offset
{yes | no}
Enables maximum match offset:
• max-match-offset—Specifies the maximum
stream offset the regex-string must report for a
match to be valid.
0 to 65535
specify-min-match-offset
{yes | no}
Enables minimum match offset:
• min-match-offset—Specifies the minimum
stream offset the regex-string must report for a
match to be valid.
0 to 65535
specify-min-match-length
{yes | no}
Enables the minimum match length:
– min-match-length—Specifies the minimum
number of bytes the regex-string must
match.
0 to 65535