Cisco 2800 Series - Commands for Verifying Cisco IOS Intrusion Prevention System

Secured Branch Router Configuration Example
Verify
8
OL-6329-01
Commands for Verifying Cisco IOS Intrusion Prevention System
• show ip ips signature—Displays Cisco IPS signature information, including which signatures are
disabled and marked for deletion.
Router# show ip ips signature
Signatures were last loaded from tftp://192.168.1.3/attack-drop.sdf
SDF release version not available
*=Marked for Deletion Action=(A)larm,(D)rop,(R)eset Trait=AlarmTraits
MH=MinHits AI=AlarmInterval CT=ChokeThreshold
TI=ThrottleInterval AT=AlarmThrottle FA=FlipAddr
WF=WantFrag Ver=Signature Version
Signature Micro-Engine: SERVICE.SMTP (1 sigs)
SigID:SubID On Action Sev Trait MH AI CT TI AT FA WF Ver
----------- -- ------ ---- ----- ----- ----- ----- ----- -- -- -- ---
3129:0 Y ADR MED 0 0 0 0 15 FA N S59
Signature Micro-Engine: SERVICE.RPC (29 sigs)
SigID:SubID On Action Sev Trait MH AI CT TI AT FA WF Ver
----------- -- ------ ---- ----- ----- ----- ----- ----- -- -- -- ---
6100:0 Y AD HIGH 0 0 0 100 30 FA N 1.0
6100:1 Y ADR HIGH 0 0 0 100 30 FA N 1.0
6101:0 Y AD HIGH 0 0 0 100 30 FA N 1.0
6101:1 Y ADR HIGH 0 0 0 100 30 FA N 1.0
6104:0 Y AD HIGH 0 0 0 100 30 FA N 2.2
6104:1 Y ADR HIGH 0 0 0 100 30 FA N 2.2
6105:0 Y AD HIGH 0 0 0 100 30 FA N 2.2
6105:1 Y ADR HIGH 0 0 0 100 30 FA N 2.2
6188:0 Y AD HIGH 0 0 0 100 30 FA N S43
6189:0 Y AD HIGH 0 0 0 100 30 FA N S43
6189:1 Y ADR HIGH 0 0 0 100 30 FA N S43
6190:0 Y AD HIGH 0 0 0 100 30 FA N 2.1
6190:1 Y ADR HIGH 0 0 0 100 30 FA N 2.1
6191:0 Y AD HIGH 0 0 0 100 30 FA N 2.1
6191:1 Y ADR HIGH 0 0 0 100 30 FA N 2.1
6192:0 Y AD HIGH 0 0 0 100 30 FA N 2.1
6192:1 Y ADR HIGH 0 0 0 100 30 FA N 2.1
6193:0 Y AD HIGH 0 0 0 100 30 FA N 2.2
6193:1 Y ADR HIGH 0 0 0 100 30 FA N 2.2
6194:0 Y AD HIGH 0 0 0 100 30 FA N 2.2
6194:1 Y ADR HIGH 0 0 0 100 30 FA N 2.2
6195:0 Y AD HIGH 0 0 0 100 30 FA N 2.2
6195:1 Y ADR HIGH 0 0 0 100 30 FA N 2.2
6196:0 Y AD HIGH 0 0 0 100 30 FA N S4
6196:1 Y ADR HIGH 0 0 0 100 30 FA N S4
6197:0 Y ADR HIGH 0 0 0 100 30 FA N S9
6197:1 Y AD HIGH 0 0 0 100 30 FA N S9
6276:0 Y AD HIGH 0 0 0 100 30 FA N S30
6276:1 Y ADR HIGH 0 0 0 100 30 FA N S30
Signature Micro-Engine: SERVICE.HTTP (23 sigs)
SigID:SubID On Action Sev Trait MH AI CT TI AT FA WF Ver
----------- -- ------ ---- ----- ----- ----- ----- ----- -- -- -- ---
3140:3 Y ADR HIGH 0 1 0 0 15 FA N S80
3140:4 Y ADR HIGH 0 1 0 0 15 FA N S80
5045:0 Y ADR HIGH 0 1 0 0 15 FA N 2.2
5047:0 Y ADR HIGH 0 1 0 0 15 FA N 2.2
5055:0 Y AD HIGH 0 1 0 0 15 FA N 2.2
5071:0 Y ADR HIGH 0 1 0 0 15 FA N 2.2