ZyXEL Communications 3.1 User Manual

 Chapter 22 IDP Commands

ZyWALL (ZLD) CLI Reference Guide

show idp anomaly profile scan-detection {tcp-portscan | 

tcp-decoy-portscan | tcp-portsweep | tcp-distributed-

portscan | tcp-filtered-portscan | tcp-filtered-decoy-

portscan | tcp-filtered-distributed-portscan | tcp-

filtered-portsweep} details

Shows selected TCP scan-detection settings for the 
specified IDP profile.

show idp anomaly profile scan-detection {udp-portscan | 

udp-decoy-portscan | udp-portsweep | udp-distributed-

portscan | udp-filtered-portscan | udp-filtered-decoy-

portscan | 

udp-filtered-distributed-portscan | udp-filtered-

portsweep} details

Shows UDP scan-detection settings for the specified IDP 
profile.

show idp anomaly profile scan-detection {ip-protocol-

scan | ip-decoy-protocol-scan | ip-protocol-sweep | ip-

distributed-protocol-scan | ip-filtered-protocol-scan | 

ip-filtered-decoy-protocol-scan | ip-filtered-

distributed-protocol-scan | ip-filtered-protocol-

sweep} details

Shows IP scan-detection settings for the specified IDP 
profile.

show idp anomaly profile scan-detection {icmp-sweep | 

icmp-filtered-sweep | open-port} details

Shows ICMP scan-detection settings for the specified 
IDP profile.

show idp anomaly profile flood-detection [all details]

Shows all flood-detection settings for the specified IDP 
profile.

show idp anomaly profile flood-detection {tcp-flood | 

udp-flood | ip-flood | icmp-flood} details

Shows flood-detection settings for the specified IDP 
profile.

show idp anomaly profile http-inspection all details

Shows http-inspection settings for the specified IDP 
profile.

show idp anomaly profile http-inspection {ascii-

encoding | u-encoding | bare-byte-unicode-encoding | 

base36-encoding | utf-8-encoding | iis-unicode-

codepoint-encoding | multi-slash-encoding | iis-

backslash-evasion | self-directory-traversal | 

directory-traversal | apache-whitespace | non-rfc-http-

delimiter | non-rfc-defined-char | oversize-request-

uri-directory | oversize-chunk-encoding | webroot-

directory-traversal} details

Shows http-inspection settings for the specified IDP 
profile.

show idp anomaly profile tcp-decoder all details

Shows tcp-decoder settings for the specified IDP profile.

show idp anomaly profile tcp-decoder {undersize-len | 

undersize-offset | oversize-offset | bad-length-options 

| truncated-options | ttcp-detected | obsolete-options 

| experimental-options} details

Shows tcp-decoder settings for the specified IDP profile.

show idp anomaly profile udp-decoder all details

Shows udp-decoder settings for the specified IDP 
profile.

show idp anomaly profile udp-decoder {truncated-header 

| undersize-len | oversize-len} details

Shows specified udp-decoder settings for the specified 
IDP profile.

show idp anomaly profile icmp-decoder all details

Shows all icmp-decoder settings for the specified IDP 
profile.

show idp anomaly profile icmp-decoder {truncated-header 

| truncated-timestamp-header | truncated-address-

header} details

Shows specified icmp-decoder settings for the specified 
IDP profile.

Editing/Creating Anomaly Profiles  (continued)