Cisco ASA 5505 Configuration Manual page 1121

Chapter 52 Using Protection Tools
IP Audit Signature List
Table 52-1
Table 52-1 Signature IDs and System Message Numbers
Signature Message
ID Number Signature Title
1000 400000 IP options-Bad Option List
1001 400001 IP options-Record Packet Route
1002 400002 IP options-Timestamp
1003 400003 IP options-Security
1004 400004 IP options-Loose Source Route
1005 400005 IP options-SATNET ID
1006 400006 IP options-Strict Source Route
1100 400007 IP Fragment Attack
1102 400008 IP Impossible Packet
OL-20339-01
lists supported signatures and system message numbers.
Signature Type Description
Informational Triggers on receipt of an IP datagram where
the list of IP options in the IP datagram header
is incomplete or malformed. The IP options
list contains one or more options that perform
various network management or debugging
tasks.
Informational Triggers on receipt of an IP datagram where
the IP option list for the datagram includes
option 7 (Record Packet Route).
Informational Triggers on receipt of an IP datagram where
the IP option list for the datagram includes
option 4 (Timestamp).
Informational Triggers on receipt of an IP datagram where
the IP option list for the datagram includes
option 2 (Security options).
Informational Triggers on receipt of an IP datagram where
the IP option list for the datagram includes
option 3 (Loose Source Route).
Informational Triggers on receipt of an IP datagram where
the IP option list for the datagram includes
option 8 (SATNET stream identifier).
Informational Triggers on receipt of an IP datagram in
which the IP option list for the datagram
includes option 2 (Strict Source Routing).
Attack Triggers when any IP datagram is received
with an offset value less than 5 but greater
than 0 indicated in the offset field.
Attack Triggers when an IP packet arrives with
source equal to destination address. This
signature will catch the so-called Land
Attack.
Cisco ASA 5500 Series Configuration Guide using ASDM
Configuring IP Audit for Basic IPS Support
52-7