Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Event Action : Reset/Shunhost pb

Hello,

If I modify the action of the signature 4701 (MSSQL Control Overflow) from "ZERO" to "reset/shunhost", I don't see any host in the host manual blocks panel.

If I choose "shunhost", it's ok.

I don't understand why. With others signatures pre-defined at "reset/shunhost" (5126 : IIS .ida Indexing Service Overflow ...) there is no problem.

Can someone help me please ?

Thanks

2 REPLIES
Cisco Employee

Re: Event Action : Reset/Shunhost pb

This should work.

Can you provide a snip from "show configuration" that shows the action configuration for signature 4701 to ensure that the configuration is correct.

As well as the output of "show events" showing that signature firing. The "show events" output will show whether or not a TCP Reset was attempted and if a Shun Host was attempted.

Cisco Employee

Re: Event Action : Reset/Shunhost pb

while you are at it a show stat net would help

100
Views
0
Helpful
2
Replies
CreatePlease login to create content