Cisco Systems IPS4510K9 - page 671

B-61
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Appendix B Signature Engines
State Engine
Tabl e B-32 lists the parameters specific to the State engine.
TableB-32 State Engine Parameters
Parameter Description Value
state-machine Specifies the state machine grouping. cisco-login
lpr-format-string
smpt
cisco-login Specifies the state machine for Cisco login:
• state-name—Name of the state required before the
signature fires an alert:
– Cisco device state
– Control-C state
– Password prompt state
– Start state
cisco-device
control-c
pass-prompt
start
lpr-format-string Specifies the state machine to inspect for the LPR
format string vulnerability:
• state-name—Name of the state required before the
signature fires an alert:
– Abort state to end LPR Format String
inspection
– Format character state
– State state
abort
format-char
start
smpt Specifies the state ma chine for the SMTP protocol:
• state-name—Name of the state required before the
signature fires an alert:
– Abort state to end LPR Format String
inspection
– Mail body state
– Mail header state
– SMTP commands state
– Start state
abort
mail-body
mail-header
smtp-commands
start
specify-min-match-
length {yes | no}
(Optional) Enables minimum match length:
• min-match-length—Specifies the minimum
number of bytes the regular expression string must
match.
0 to 65535
regex-string Sp ecifies the regular expression to search for.
Note This parameter is protected; you cannot edit it.
string