Chapter 22 IDP Commands

 

 

Table 103 Editing/Creating Anomaly Profiles (continued)

 

COMMAND

DESCRIPTION

show idp anomaly profile scan-detection {tcp-portscan

Shows selected TCP scan-detection settings for the

tcp-decoy-portscan tcp-portsweep tcp-distributed-

specified IDP profile.

portscan tcp-filtered-portscan tcp-filtered-decoy-

 

portscan tcp-filtered-distributed-portscan tcp-

 

filtered-portsweep} details

 

show idp anomaly profile scan-detection {udp-portscan

Shows UDP scan-detection settings for the specified IDP

udp-decoy-portscan udp-portsweep udp-distributed-

profile.

portscan udp-filtered-portscan udp-filtered-decoy-

 

portscan

 

udp-filtered-distributed-portscan udp-filtered-

 

portsweep} details

 

show idp anomaly profile scan-detection {ip-protocol-

Shows IP scan-detection settings for the specified IDP

scan ip-decoy-protocol-scan ip-protocol-sweep ip-

profile.

distributed-protocol-scan ip-filtered-protocol-scan

 

ip-filtered-decoy-protocol-scan ip-filtered-

 

distributed-protocol-scan ip-filtered-protocol-

 

sweep} details

 

show idp anomaly profile scan-detection {icmp-sweep

Shows ICMP scan-detection settings for the specified

icmp-filtered-sweep open-port} details

IDP profile.

show idp anomaly profile flood-detection [all details]

Shows all flood-detection settings for the specified IDP

 

profile.

 

 

show idp anomaly profile flood-detection {tcp-flood

Shows flood-detection settings for the specified IDP

udp-flood ip-flood icmp-flood} details

profile.

 

 

show idp anomaly profile http-inspection all details

Shows http-inspection settings for the specified IDP

 

profile.

show idp anomaly profile http-inspection {ascii-

Shows http-inspection settings for the specified IDP

encoding u-encoding bare-byte-unicode-encoding

profile.

base36-encoding utf-8-encoding iis-unicode-

 

codepoint-encoding multi-slash-encoding iis-

 

backslash-evasion self-directory-traversal

 

directory-traversal apache-whitespace non-rfc-http-

 

delimiter non-rfc-defined-char oversize-request-

 

uri-directory oversize-chunk-encoding webroot-

 

directory-traversal} details

 

show idp anomaly profile tcp-decoder all details

Shows tcp-decoder settings for the specified IDP profile.

show idp anomaly profile tcp-decoder {undersize-len

Shows tcp-decoder settings for the specified IDP profile.

undersize-offset oversize-offset bad-length-options

 

truncated-options ttcp-detected obsolete-options

 

experimental-options} details

 

show idp anomaly profile udp-decoder all details

Shows udp-decoder settings for the specified IDP

 

profile.

show idp anomaly profile udp-decoder {truncated-header

Shows specified udp-decoder settings for the specified

undersize-len oversize-len} details

IDP profile.

show idp anomaly profile icmp-decoder all details

Shows all icmp-decoder settings for the specified IDP

 

profile.

 

 

show idp anomaly profile icmp-decoder {truncated-header

Shows specified icmp-decoder settings for the specified

truncated-timestamp-header truncated-address-

IDP profile.

header} details

 

 

187

ZyWALL (ZLD) CLI Reference Guide