Cisco Cisco 2000 Series Wireless LAN Controller Manual Técnico

The IDS signature text file documents nine parameters for each IDS signature. You can modify these
signature parameters and write new custom signatures. See the format that the Controller IDS Parameters
section of this document provides.

All signatures must have this format:

Name = <str>, Ver = <int>, Preced = <int>, FrmType = <frmType−type>, Pattern = 

<pattern−format>, Freq = <int>, Interval = <int>, Quiet = <int>, Action = <action−val>, 

Desc = <str>

The maximum length of the line is 1000 characters. Lines that are longer than 1000 are not parsed correctly.

All lines that start with 

#

 in the IDS text file are considered comments and are skipped. Also skipped are all

blank lines, which are lines with just whitespace or newline. The first noncomment, nonblank line must have
the keyword 

Revision

. If the file is a Cisco−supplied signature file, you must not change the value of

Revision

. Cisco uses this value to manage signature file releases. If the file contains signatures that have

been created by the end user, the value of 

Revision

 must be 

custom

 (

Revision = custom

).

The nine IDS signature parameters that you can modify are:

 = signature name. This is a unique string that identifies the signature. The maximum length of

the name is 20 characters.

• 

 = signature precedence. This is a unique ID that indicates the precedence of the signature

among all the signatures that are defined in the signature file. There must be one 

Preced

 token per

signature.

• 

 = frame type. This parameter can take values from the 

<frmType−val>

 list. There must

be one 

FrmType

 token per signature. The 

<frmType−val>

 can be one of these two keywords

only:

•