Filter
Top Products
9-7
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter 9 Configuring Anomaly Detection
Anomaly Detection Signatures
13002 1 Internal Other Scanner Identified a worm attack over an Other
protocol in the internal zone; the Other
histogram threshold was crossed and a
scanner over an Other protocol was
identified.
13003 0 External TCP Scanner Identified a single scanner over a TCP
protocol in the external zone.
13003 1 External TCP Scanner Identified a worm attack over a TCP
protocol in the external zone; the TCP
histogram threshold was crossed and a
scanner over a TCP protocol was
identified.
13004 0 External UDP Scanner Identified a single scanner over a UDP
protocol in the external zone.
13004 1 External UDP Scanner Identified a worm attack over a UDP
protocol in the external zone; the UDP
histogram threshold was crossed and a
scanner over a UDP protocol was
identified.
13005 0 External Other Scanner Identified a single scanner over an Other
protocol in the external zone.
13005 1 External Other Scanner Identified a worm attack over an Other
protocol in the external zone; the Other
histogram threshold was crossed and a
scanner over an Other protocol was
identified.
13006 0 Illegal TCP Scanner Identified a single scanner over a TCP
protocol in the illegal zone.
13006 1 Illegal TCP Scanner Identified a worm attack over a TCP
protocol in the illegal zone; the TCP
histogram threshold was crossed and a
scanner over a TCP protocol was
identified.
13007 0 Illegal UDP Scanner Identified a single scanner over a UDP
protocol in the illegal zone.
13007 1 Illegal UDP Scanner Identified a worm attack over a UDP
protocol in the illegal zone; the UDP
histogram threshold was crossed and a
scanner over a UDP protocol was
identified.
Table 9-1 Anomaly Detection Worm Signatures (continued)
Signature ID Subsignature ID Name Description