Junos custom-attack signature pattern syntax
Posted
by James Hawkwind
on Server Fault
See other posts from Server Fault
or by James Hawkwind
Published on 2010-03-28T13:00:19Z
Indexed on
2010/03/28
13:03 UTC
Read the original article
Hit count: 691
I am stuck at a point with the configuration of a custom-attack signature in Junos. According to the Junos Custom Attack Definition documentation page, I can set up a custom attack based upon a signature in the packet. In the documentation you can specify a "pattern" to match, but it fails to describe what the pattern syntax should be. Particularly, I want to match the HEX values of
8C 00 13 00
in the first four bytes of the TCP data payload. Does anyone know how to accomplish this correctly?
© Server Fault or respective owner
