Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Detect string in the payload

Hi,

I want to configure my sensor such that it sends a reset packet if it detect string "ool" in the payload.

Also, the sensor should send the original packet from the attacker included in the alert.

I created a custome signature with STRING.TCP, but it does not seem to work.

Any ideas ??

Thanks,

1 REPLY
Gold

Re: Detect string in the payload

Can you provide a little more detail as to how you tested and what you mean by "it does not seem to work".

126
Views
0
Helpful
1
Replies
CreatePlease login to create content