ZyXEL Communications ZyWALL 310 - 42.8 IDP Packet Capture

Chapter 42 IDP Commands
ZyWALL Series CLI Reference Guide
364
You must use the configure terminal command to enter the configuration mode before you can
use these commands.
42.8 IDP Packet Capture
The following table describes the commands for configuring IDP packet capture settings. Use IDP
packet capture to capture network traffic that triggers IDP signatures.
Table 202 Commands for IDP White List
COMMAND DESCRIPTION
idp white-list
Enter IDP white list sub-command mode.
[no] sid {1–
4294967295}
Adds the specified signature to the IDP white list.
The no command removes the specified signature from the IDP white list.
exit
Exit IDP white list sub-command mode.
show idp white-list
Displays all signatures in the IDP white list.
Table 203 Commands for IDP Statistics
COMMAND DESCRIPTION
idp packet-capture
{enable | disable}
Enables or disables IDP packet capture.
idp packet-capture show
status
Displays current IDP packet capture settings.
idp packet-capture select
{enable | disable}
Captures network traffic that triggers the specified IDP signatures.
idp packet-capture select
{add-id sid | del-id sid}
Captures network traffic that triggers the specified IDP signature. You can
select up to 10 signature SIDs.
Use the
del command to stop the Zyxel Device from capturing network
traffic that triggers the specified signature.
idp packet-capture
default setting
Returns IDP packet capture settings to factory defaults. This command will:
• Enable IDP packet capture.
• Disable IDP packet capture select.
• Clear all selected signature SIDs.