Reference Guide

Dell PowerConnect ArubaOS 5.0 Command Line Interface | Reference Guide ids signature-profile | 259
Syntax
Usage Guidelines
The following describes the configuration for the predefined signature profiles:
Parameter Description Default
<profile> Name that identifies an instance of the profile. The name must be 1-63
characters.
“default”
bssid BSSID field in the 802.11 frame header. —
clone Name of an existing IDS signature profile from which parameter values
are copied.
—
dst-mac Destination MAC address in the 802.11 frame header. —
frame-type Type of 802.11 frame. For each type of frame, further parameters can be
specified to filter and detect only the required frames.
—
assoc Association frame type
auth Authentication frame type
beacon Beacon frame type
control All control frames
data All data frames
deauth Deauthentication frame type
disassoc Disassociation frame type
mgmt Management frame type
probe-re
quest
Probe request frame type
probe-re
sponse
Probe response frame type
ssid For beacon, probe-request, and probe-response frame types, specify the
SSID as either a string or hex pattern.
—
ssid-length For beacon, probe-request, and probe-response frame types, specify the
length, in bytes, of the SSID. Maximum length is 32 bytes.
—
no Negates any configured parameter. —
payload Pattern at a fixed offset in the payload of an 802.11 frame. Specify the
pattern to be matched as a string or hex pattern. Maximum length is 32
bytes.
—
offset When a payload pattern is configured, specify the offset in the payload
where the pattern is expected to be found in the frame.
—
seq-num Sequence number of the frame. —
src-mac Source MAC address in the 802.11 frame header. —
Signature Profile Parameter Value
AirJack frame-type beacon ssid = AirJack
ASLEAP frame-type beacon ssid = asleap