ZyXEL Communications ZYWALL - CLI Reference Manual page 192

Chapter 21 IDP Commands
Table 100 Editing/Creating Anomaly Profiles (continued)
COMMAND
show idp anomaly profile http-inspection {ascii-
encoding | u-encoding | bare-byte-unicode-
encoding | base36-encoding | utf-8-encoding |
iis-unicode-codepoint-encoding | multi-slash-
encoding | iis-backslash-evasion | self-
directory-traversal | directory-traversal |
apache-whitespace | non-rfc-http-delimiter | non-
rfc-defined-char | oversize-request-uri-
directory | oversize-chunk-encoding | webroot-
directory-traversal} details
show idp anomaly profile tcp-decoder all details
show idp anomaly profile tcp-decoder {undersize-
len | undersize-offset | oversize-offset | bad-
length-options | truncated-options | ttcp-
detected | obsolete-options | experimental-
options} details
show idp anomaly profile udp-decoder all details
show idp anomaly profile udp-decoder {truncated-
header | undersize-len | oversize-len} details
show idp anomaly profile icmp-decoder all details Shows all icmp-decoder settings for the
show idp anomaly profile icmp-decoder {truncated-
header | truncated-timestamp-header | truncated-
address-header} details
21.3.4.1 Creating an Anomaly Profile Example
In this example we create a profile named "test", configure some settings, display them, and
then return to global command mode.
Router# configure terminal
Router(config)# idp anomaly test
Router(config-idp-anomaly-profile-test)# tcp-decoder oversize-offset
action drop
Router(config-idp-anomaly-profile-test)# tcp-decoder oversize-offset log
alert
Router(config-idp-anomaly-profile-test)# tcp-decoder oversize-offset
activate
Router(config-idp-anomaly-profile-test)# no tcp-decoder oversize-offset
activate
Router(config-idp-anomaly-profile-test)# exit
Router(config)# show idp anomaly test tcp-decoder oversize-offset
details
message: (tcp_decoder) OVERSIZE-OFFSET ATTACK
keyword: tcp-decoder oversize-offset
activate: no
action: drop
log: log alert
Router(config)#
192
DESCRIPTION
Shows http-inspection settings for the specified
IDP profile.
Shows tcp-decoder settings for the specified
IDP profile.
Shows tcp-decoder settings for the specified
IDP profile.
Shows udp-decoder settings for the specified
IDP profile.
Shows specified udp-decoder settings for the
specified IDP profile.
specified IDP profile.
Shows specified icmp-decoder settings for the
specified IDP profile.
ZyWALL (ZLD) CLI Reference Guide