Cisco Systems IPS4510K9 - page 676

B-66
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
AppendixB Signature Engines
String XL Engines
no-case Specifies to treat all alphabetic characters in the
expression as case insensitive.
true | false (default)
raw-regex If set to true, min-match-length,
max-match-length, min-whole-length,
max-whole-length, dot-all, utf8, no-case,
stingy, and end-optional are not used to
reformat the regular expression string.
Note raw-regex lets you enter a regular
expression string in Raw syntax without
being translated.
true | false (default)
regex-string (Required) Specifies the Regex pattern to use in
the search.
Note This parameter is required unless
max-stream-length is set. Do not set the
regex-string if max-stream-length is set.
string
service-ports (Required) Specifies a comma-separated list of
ports or port ranges where the target service
resides.
Note This parameter is required for the String
XL TCP and String XL UDP signature
engines. It cannot be used for the String
XL ICMP signature engine.
0 to 65535
1
a-b[,c-d]
specify-exact-match-offset
{yes | No}
Enables exact match offset:
• exact-match-offset—Specifies the exact
stream offset in bytes the regular
expression string must report for a match to
be valid.
0 to 65535
specify-max-match-offset
{yes | No}
Enables maximum match offset:
• maximum-match-offset—Specifies the
maximum stream offset in bytes the regular
expression string must report for a match to
be valid.
0 to 65535
specify-min-match-offset {yes
| No}
Enables minimum match offset:
• min-match-offset—Specifies the minimum
stream offset in bytes the regular
expression string must report for a match to
be valid.
0 to 65535
specify-max-match-
length {yes | No}
Enables maximum match length:
• max-match-length—Specifies the
maximum number of bytes the regular
expression string must match for the
pattern to be considered a hit.
0 to 65535
TableB-36 String XL Engine Parameters (continued) (continued)
Parameter Description Value