User's Manual

Chapter 22 IDP Commands
NXC CLI Reference Guide
151
udp-decoder {truncated-header | undersize-len
| oversize-len} log [alert]
Sets udp decoder log or alert options.
no udp-decoder {truncated-header | undersize-
len | oversize-len} log
Deactivates udp decoder log options.
udp-decoder {truncated-header | undersize-len
| oversize-len} action {drop | reject-sender
| reject-receiver | reject-both}
Sets udp decoder action
no udp-decoder {truncated-header | undersize-
len | oversize-len} action
Deactivates udp decoder actions.
[no] icmp-decoder {truncated-header |
truncated-timestamp-header | truncated-
address-header} activate
Activates or deactivates icmp decoder options
icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header}
log [alert]
Sets icmp decoder log or alert options.
no icmp-decoder {truncated-header |
truncated-timestamp-header | truncated-
address-header} log
Deactivates icmp decoder log options.
icmp-decoder {truncated-header | truncated-
timestamp-header | truncated-address-header}
action {drop | reject-sender | reject-
receiver | reject-both}}
Sets icmp decoder action
no icmp-decoder {truncated-header |
truncated-timestamp-header | truncated-
address-header} action
Deactivates icmp decoder actions.
show idp anomaly profile scan-detection [all
details]
Shows all scan-detection settings of the
specified IDP profile.
show idp anomaly profile scan-detection {tcp-
portscan | tcp-decoy-portscan | tcp-portsweep |
tcp-distributed-portscan | tcp-filtered-portscan
| tcp-filtered-decoy-portscan | tcp-filtered-
distributed-portscan | tcp-filtered-portsweep}
details
Shows selected TCP scan-detection settings
for the specified IDP profile.
show idp anomaly profile scan-detection {udp-
portscan | udp-decoy-portscan | udp-portsweep |
udp-distributed-portscan | udp-filtered-portscan
| udp-filtered-decoy-portscan |
udp-filtered-distributed-portscan | udp-
filtered-portsweep} details
Shows UDP scan-detection settings for the
specified IDP profile.
show idp anomaly profile scan-detection {ip-
protocol-scan | ip-decoy-protocol-scan | ip-
protocol-sweep | ip-distributed-protocol-scan |
ip-filtered-protocol-scan | ip-filtered-decoy-
protocol-scan | ip-filtered-distributed-
protocol-scan | ip-filtered-protocol-sweep}
details
Shows IP scan-detection settings for the
specified IDP profile.
show idp anomaly profile scan-detection {icmp-
sweep | icmp-filtered-sweep | open-port} details
Shows ICMP scan-detection settings for the
specified IDP profile.
Table 84 Editing/Creating Anomaly Profiles (continued)
COMMAND DESCRIPTION