Release Notes

Parameter Description Default
ssid-length
For beacon, probe-request, and probe-response frame types,
specify the length, in bytes, of the SSID. Maximum length is 32
bytes.
—
no
Negates any configured parameter. —
payload <pattern>
Pattern at a fixed offset in the payload of an 802.11 frame.
Specify the pattern to be matched as a string or hex pattern.
Maximum length is 32 bytes.
—
offset
When a payload pattern is configured, specify the offset in the
payload where the pattern is expected to be found in the
frame.
—
seq-num
Sequence number of the frame. —
src-mac
Source MAC address in the 802.11 frame header. —
valid-ap
Matches a valid AP SSID —
Example
The following command configures a signature profile:
(host) (config) #ids signature-profile floor4
(host) (IDS Signature Profile "floor4") #frame-type assoc
(host) (IDS Signature Profile "floor4") #src-mac 00:00:00:00:00:00
Usage Guidelines
The following describes the configuration for the predefined signature profiles:
Signature Profile Parameter Value
AirJack frame-type beacon ssid = AirJack
ASLEAP frame-type beacon ssid = asleap
Deauth-Broadcast frame-type deauth
dst-mac ff:ff:ff:ff:ff:ff
Netstumbler Generic payload offset=3 pattern=0x00601d
payload offset=6 pattern=0x0001
Netstumbler Version
3.3.0x
payload offset=3 pattern=0x00601d
payload offset=12 pattern=0x000102
Null-Probe-Response frame-type probe-response ssid length = 0
Dell Networking W-Series ArubaOS 6.4.x | Reference Guide ids signature-profile | 388