Cisco AIP-SSM-10, Руководство по установке

Страница: 183 / 196

Glossary
GL-15
Installing Cisco Intrusion Prevention System Appliances and Modules 5.0
78-16124-01
SNMP2
SNMP Version 2. Version 2 of the network management protocol. SNMP2 supports centralized and
distributed network management strategies, and includes improvements in the SMI, protocol
operations, management architecture, and security.
source address
Address of a network device that is sending data.
SP
Statistics Processor. Keeps track of system statistics such as packet counts and packet arrival rates.
SPAN
Switched Port Analyzer. Feature of the Catalyst 5000 switch that extends the monitoring abilities of
existing network analyzers into a switched Ethernet environment. SPAN mirrors the traffic at one
switched segment onto a predefined SPAN port. A network analyzer attached to the SPAN port can
monitor traffic from any other Catalyst switched port.
spanning tree
Loop-free subset of a network topology.
SQL
Structured Query Language. International standard language for defining and accessing relational
databases.
SRAM
Type of RAM that retains its contents for as long as power is supplied. SRAM does not require constant
refreshing, like DRAM.
SRP
Stream Reassembly Processor. Reorders TCP streams to ensure the arrival order of the packets at the
various stream-based inspectors. It is also responsible for normalization of the TCP stream. The
normalizer engine lets you enable or disable alert and deny actions.
SSH
Secure Shell. A utility that uses strong authentication and secure communications to log in to another
computer over a network.
SSL
Secure Socket Layer. Encryption technology for the Internet used to provide secure transactions, such
as the transmission of credit card numbers for e-commerce.
Stacheldraht
A DDoS tool that relies on the ICMP protocol.
STATE engine
Stateful searches of HTTP strings.
Statistics Processor
See SP.
Stream Reassembly
Processor
See SRP.
STRING engine
A signature engine that provides regular expression-based pattern inspection and alert functionality for
multiple transport protocols, including TCP, UDP, and ICMP.
subsignature
A more granular representation of a general signature. It typically further defines a broad scope
signature.
surface mounting
Refers to attaching rubber feet to the bottom of a sensor when it is installed on a flat surface. The rubber
feet allow proper airflow around the sensor and they also absorb vibration so that the hard-disk drive is
less impacted.
switch
Network device that filters, forwards, and floods frames based on the destination address of each frame.
The switch operates at the data link layer of the OSI model.