B-51
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix B Signature Engines
Service Engines
Table B-24 lists the parameters specific to the Service MSRPC engine.
Table B-24 Service MSRPC Engine Parameters
Parameter Description Value
protocol Enables the protocol of interest for this inspector:
• type—Specifies UDP or TCP.
tcp
udp
specify-flags {yes |
no}
Enables the flags to set:
• msrpc-flags—Specifies MSRPC TCP flags.
• msrpc-tcp-flags-mask—Specifies the
MSRPC TCP flags mask.
concurrent-execution
did-not-execute
first-fragment
last-fragment
maybe-semantics
object-uuid
reserved
specify-operation {yes
| no}
(Optional) Enables using MSRPC operation:
• operation—Specifies the MSRPC operation
requested.
Note Required for
SMB_COM_TRANSACTION
commands. Exact match.
0 to 65535
swap-attacker-victim Swaps the attacker and victim addresses and
ports (source and destination) in the alert
message and in any actions taken.
true | false (default)