cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
513
Views
0
Helpful
1
Replies

Creating signatures for a particular source port

pbobby
Level 1
Level 1

Can I create a signature for Cisco SIDS that triggers if it matches a source IP address or matches a source port?

1 Reply 1

marcabal
Cisco Employee
Cisco Employee

With version 2.5(1)Sx and earlier versions there is not the ability to create custom signatures and there is no signature matching your requests.

However, in 3.0 sensors there will be the ability to create custom signatures. You may be able to create custom signatures which come close to what you are asking.

Once 3.0 comes out this summer then you can give it a try, and if you have difficulty then repost the question and I can try to help with some specific examples and instructions. I can not give these examples out right now since 3.0 has not yet been released.