Radware Alteon Application Manual page 621

Matching and Denying a UDP Pattern Group
The following is an example configuration for matching an denying a UDP pattern group.
To match and deny a UDP pattern group
1. Configure a list of SLB strings containing binary patterns and offset pairs.
This example illustrates adding one binary pattern and one ASCII string pattern. The binary
pattern is written in hexadecimal notation.
>> /cfg/slb/layer7/slb/addstr
Enter type of string [l7lkup|pattern]: pattern
Enter match pattern type [ascii|binary]: binary
Enter HEX string:
Enter offset in bytes from start of IP frame (0-
1500): 2
Enter depth in bytes to search from offset (0-
1500): 0 )
Enter operation (eq|gt|lt): eq
>> Server Loadbalance Resource# add
Enter type of string [l7lkup|pattern]: pattern
Enter match pattern type [ascii|binary]: ascii
Enter ASCII string:
Enter offset in bytes from start of IP frame (0-
1500): 44
Enter depth in bytes to search from offset (0-
1500): 30
2. Identify the IDs of the defined strings.
>> Server Loadbalance resource# cur
The strings in bold are used in this example. Number of entries: 10
ID SLB String
1
ida
2
%c1%9c
3
%c0%af
4
playdog.com
6
HTTPHDR:Host:
7
HTTPHDR:SoapAction=*
8
BINMATCH=014F, offset=2, depth=0, op=eq, cont 256
9
STRMATCH=/default.htm offset=44, depth=30, op=eq, cont 256
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
014F
/default.htm )
www.playdog.com
Advanced Denial of Service Protection
(Add the first pattern)
(Select binary matching)
(For this binary pattern)
(Starting from third byte)
(Search length of the pattern
(For values equal to this binary
pattern)
(Add the second pattern)
(Select ASCII matching)
(Match this ASCII string)
(Search from 45th byte)
(through the 30th byte)
621