09-06-2004 06:17 AM - edited 03-09-2019 08:42 AM
What is the difference between signatures classified as informational signatures and those as attack signatures
09-06-2004 03:27 PM
Info signatures are defned as signatures that gather information from hosts or your network, such as ping/port sweeps, but they don't actually cause any damage.
Attack signatures are classified as those that will cause damage to a system/network, either by bringing it down or putting it in an unstable state.
09-06-2004 10:29 PM
I should have guessed - "info" meaning that's what is being collected - thanks -Peter CCNP
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide