Chapter 30 ADP

 

Table 144 HTTP Inspection and TCP/UDP/ICMP Decoders (continued)

 

LABEL

DESCRIPTION

 

 

UDP Decoder

 

 

 

 

 

 

 

OVERSIZE-LEN ATTACK

This is when a UDP packet is sent which has a UDP length field of

 

 

 

greater than the actual packet length. This may cause some

 

 

 

applications to crash.

 

 

 

 

 

 

TRUNCATED-HEADER

This is when a UDP packet is sent which has a UDP datagram

 

 

ATTACK

length of less the UDP header length. This may cause some

 

 

 

applications to crash.

 

 

 

 

 

 

UNDERSIZE-LEN ATTACK

This is when a UDP packet is sent which has a UDP length field of

 

 

 

less than 8 bytes. This may cause some applications to crash.

 

 

 

 

 

 

ICMP Decoder

 

 

 

 

 

 

 

TRUNCATED-ADDRESS-

This is when an ICMP packet is sent which has an ICMP datagram

 

 

HEADER ATTACK

length of less than the ICMP address header length. This may

 

 

 

cause some applications to crash.

 

 

 

 

 

 

TRUNCATED-HEADER

This is when an ICMP packet is sent which has an ICMP datagram

 

 

ATTACK

length of less than the ICMP header length. This may cause some

 

 

 

applications to crash.

 

 

 

 

 

 

TRUNCATED-TIMESTAMP-

This is when an ICMP packet is sent which has an ICMP datagram

 

 

HEADER ATTACK

length of less than the ICMP Time Stamp header length. This may

 

 

 

cause some applications to crash.

 

 

 

 

 

30.9.2 Protocol Anomaly Configuration

In the Anti-X > ADP > Profile screen, click the Edit icon or the Add icon and choose a base profile, then select the Protocol Anomaly tab. If you made changes to other screens belonging to this profile, make sure you have clicked OK or Save to save the changes before selecting the Protocol Anomaly tab.

 

459

ZyWALL USG 300 User’s Guide