You are here: Home > CLI Commands > Just_CLI_Topics > show ids signature-profile

show ids signature-profile

show ids signature-profile <profile-name>

Description

Show an IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. signature profile.

Syntax

Parameter

Description

<profile-name>

Name of an IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Signature profile.

Usage Guidelines

Issue this command without the <profile>parameter to display the entire IDSIntrusion Detection System. IDS monitors a network or systems for malicious activity or policy violations and reports its findings to the management system deployed in the network. Signature profile list, including profile status and the number of references to each profile. Include a profile name to display detailed configuration information for that profile.

Examples

The example below shows that the controller has eight configured Signature profiles.

 

(host) [mynode] (config) #show ids signature-profile

 

IDS Signature Profile List

--------------------------

Name References Profile Status

---- ---------- --------------

AirJack 1 Predefined

ASLEAP 1 Predefined

Deauth-Broadcast 1 Predefined

default 1

Netstumbler Generic 1 Predefined

Netstumbler Version 3.3.0x 1 Predefined

Null-Probe-Response 1 Predefined

sample 0

 

Total:8

This example displays the configuration settings for the profile AirJack.

 

(host) [mynode] (config) # show ids signature-profile

IDS Signature Profile "AirJack" (predefined)

---------------------------------------------

Parameter Value

--------- -----

Frame Type beacon SSID = AirJack

The output of this command includes the following parameters:

Parameter

Description

Frame Type

Type of 802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. frame. For each type of frame, further parameters may be included to filter and detect only the required frames.

assoc: Association frame type.

auth: Authentication frame type.

beacon: Beacon frame type.

control: All control frames.

data: All data frames.

deauth: Deauthentication frame type.

disassoc: Disassociation frame type.

mgmt: Management frame type.

probe-request: Probe request frame type.

probe-response: Probe response frame type.

ssid: For beacon, probe-request, and probe-response frame types, the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. as either a string or hex pattern.

ssid-length: For beacon, probe-request, and probe-response frame types, the length, in bytes, of the SSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network..

 

payload

Pattern at a fixed offset in the payload of an 802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. frame.

sequence number

Sequence number of the frame.

src- mac

Source MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address in the 802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. frame header.

dst- mac

Source MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address in the 802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. frame header.

bssid

BSSIDBasic Service Set Identifier. The BSSID identifies a particular BSS within an area. In infrastructure BSS networks, the BSSID is the MAC address of the AP. In independent BSS or ad hoc networks, the BSSID is generated randomly. field in the 802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. frame header.

Related Commands

Command

Description

ids signature-profile

This command configures the signature profile.

Command History

Release

Modification

ArubaOS 8.0.0.0

Command Introduced.

Command Information

Platforms

License

Command Mode

All platforms

Base operating system.

Available in Enable and Config mode on Mobility Master.

/*]]>*/