Cisco Cisco ASA 5580 Adaptive Security Appliance Leaflet
7-63
思科 ASA 系列命令参考，S 命令
第 7 章 show failover 至 show ipsec stats traffic 命令
show ip audit count
2005 I ICMP Time Exceed 0
2006 I ICMP Parameter Problem 0
2007 I ICMP Time Request 0
2008 I ICMP Time Reply 0
2009 I ICMP Info Request 0
2010 I ICMP Info Reply 0
2011 I ICMP Address Mask Request 0
2012 I ICMP Address Mask Reply 0
2150 A Fragmented ICMP 0
2151 A Large ICMP 0
2154 A Ping of Death 0
3040 A TCP No Flags 0
3041 A TCP SYN & FIN Flags Only 0
3042 A TCP FIN Flag Only 0
3153 A FTP Improper Address 0
3154 A FTP Improper Port 0
4050 A Bomb 0
4051 A Snork 0
4052 A Chargen 0
6050 I DNS Host Info 0
6051 I DNS Zone Xfer 0
6052 I DNS Zone Xfer High Port 0
6053 I DNS All Records 0
6100 I RPC Port Registration 0
6101 I RPC Port Unregistration 0
6102 I RPC Dump 0
6103 A Proxied RPC 0
6150 I ypserv Portmap Request 0
6151 I ypbind Portmap Request 0
6152 I yppasswdd Portmap Request 0
6153 I ypupdated Portmap Request 0
6154 I ypxfrd Portmap Request 0
6155 I mountd Portmap Request 0
6175 I rexd Portmap Request 0
6180 I rexd Attempt 0
6190 A statd Buffer Overflow 0
IP AUDIT INTERFACE COUNTERS: inside
...
相关命令
命令
说明
clear ip audit count
清除审核策略的签名匹配计数。
ip audit interface
将审核策略分配至接口。
ip audit name
创建一个指定的审核策略，用于标识与攻击签名或信息签名匹配的数据
包时要采取的操作。
包时要采取的操作。
show running-config
ip audit attack
ip audit attack
显示
ip audit attack 命令的配置。