cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
347
Views
0
Helpful
2
Replies

DIFFERENCE BETWEEN IDS INFO and ATTACK SIGNATURES

pdpmail
Level 1
Level 1

What is the difference between signatures classified as informational signatures and those as attack signatures

2 Replies 2

gfullage
Cisco Employee
Cisco Employee

Info signatures are defned as signatures that gather information from hosts or your network, such as ping/port sweeps, but they don't actually cause any damage.

Attack signatures are classified as those that will cause damage to a system/network, either by bringing it down or putting it in an unstable state.

I should have guessed - "info" meaning that's what is being collected - thanks -Peter CCNP