Filter
Top Products
B-35
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix B Signature Engines
Meta Engine
Table B-15 lists the parameters specific to the Meta engine.
Table B-15 Meta Engine Parameters
Parameter Description Value
component-list Specifies the Meta engine component:
• edit—Edits an existing entry.
• insert—Inserts a new entry into the list:
–
begin—Places the entry at the beginning of the
active list.
–
end—Places the entry at the end of the active
list.
–
inactive—Places the entry into the inactive list.
–
before—Places the entry before the specified
entry.
–
after—Places the entry after the specified entry.
• move—Moves an entry in the list.
• component-count—Specifies the number of times
component must fire before this component is
satisfied
• component-sig-id—Specifies the signature ID of the
signature to match this component on.
• component-subsig-id—Specifies the subsignature
ID of the signature to match this component on.
• is-not-component—Specifies that the component is
a NOT component.
name1
true | false
component-list-in-order Specifies to fire the component list in order. true | false
all-components-required Specifies to use all components. true | false
all-not-components-required Specifies to use all of the NOT components. true | false
swap-attacker-victim Swaps the attacker and victim addresses and ports
(source and destination) in the alert message and in any
actions taken.
true| false
(default)
meta-reset-interval Specifies the time in seconds to reset the Meta signature. 0 to 3600
meta-key Specifies the storage type for the Meta signature:
• Attacker address
• Attacker and victim addresses
• Attacker and victim addresses and ports
• Victim address
• Axxx
• AxBx
• AaBb
• xxBx
unique-victim-ports Specifies the number of unique victims ports required
per Meta signature.
1 to 256