Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Signature triggers on?

Hi All

For example signature 32879/0 "ProFTPD TELNET_IAC Request Arbitrary Code Execution Vulnerability". Is there a way to establish exactly what the signature contains so that when looking through a pcap file you can find the exact blob of code it fired on?  This would be useful in general rather than just against this signature. I can see that some signatures do seem to provide this information but many don't. Does anyone have any ideas how to do this?

Cheers

Ben

Everyone's tags (2)
338
Views
0
Helpful
0
Replies
CreatePlease login to create content