Print this pagePrint this page

Email this topicEmail this topic

View PDFView PDF

Download EPUBDownload EPUB

payload

Configures payload settings. The payload command sets a numerical index pattern and offset for this WIPS signature. Payload-based signatures detect patterns in the content of the file rather than attributes, such as a hash, allowing them to identify and block altered malware.

Supported in the following platforms:

  • Access Points — AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP7632, AP7662, AP8163, AP8432, AP8533
  • Wireless Controller — RFS4010
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

payload <1-3> pattern <WORD> offset <0-255>

Parameters

payload <1-3> pattern <WORD> offset <0-255>

payload <1-3>

Configures payload settings

  • <1-3> – Set the payload index from 1 - 3.

pattern <WORD>

Specifies the pattern to match: hex or string

  • <WORD> – Set the pattern name.

offset <0-255>

Specifies the payload offset to start the pattern match

  • <0-255> – Set the offset value from 0 - 255.

Examples

nx9500-6C8809(config-test-signature-test)#payload 1 pattern test offset 1
nx9500-6C8809(config-test-signature-test)#show context
 signature test
  bssid 11-22-33-44-55-66
  dst-mac 55-66-77-88-99-00
  frame-type assoc
  filter-ageout 8
  payload 1 pattern test offset 1
nx9500-6C8809(config-test-signature-test)#

Related Commands

no (wips-signature-config-mode-command)

Removes payload index and associated settings
Published June 2019prev | next

Email this topicEmail this topic

Print this pagePrint this page