Junos custom-attack signature pattern syntax
- by James Hawkwind
I am stuck at a point with the configuration of a custom-attack signature in Junos. According to the Junos Custom Attack Definition documentation page, I can set up a custom attack based upon a signature in the packet. In the documentation you can specify a "pattern" to match, but it fails to describe what the pattern syntax should be. Particularly, I want to match the HEX values of
8C 00 13 00
in the first four bytes of the TCP data payload. Does anyone know how to accomplish this correctly?
