tcp-xmas-scan
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
629
Alcatel-Lucent
Beta
Beta
OmniAccess 700 CLI Command Reference Guide
TCP
-
XMAS
-
SCAN
tcp-xmas-scan
D
ESCRIPTION
This frame should never be seen in normal TCP operation. Sometimes this is
done in preparation for a future attack, or sometimes it is done to see if the system
has a service which is susceptible to attack. A TCP frame has been seen with a
sequence number of zero and the FIN, URG and PUSH bits all set. To avoid this
attack include the above command.
P
ARAMETERS
None.
E
XAMPLE
ALU(config-firewall-attack-A1)# tcp-xmas-scan
UDP
-
FLOOD
udp-flood
[
threshold <1-4294967295> <1-4294967295>
]
D
ESCRIPTION
Enter this command in the Firewall-Attack Sub Configuration mode. This
command is used to configure udp-flood attack for an attack object.
P
ARAMETERS
E
XAMPLE
ALU(config-firewall-attack-A1)# udp-flood
Parameter
Description
threshold
Threshold limit set.
1-4294967295
Number of packets permissible within a
defined interval.
1-4294967295
The limiting time to which the packets
can be sent.
