Custom nbar with PDLM

From: mpermoda@hotmail.com
Date: Sun Aug 03 2008 - 21:08:04 ART

• Next message: Scott Morris: "RE: BGP damping"
• Previous message: keith tokash: "RE: Cisco Assessor Lab"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

All,

I am working on a lab and one question requires the use of NBAR with PDLM.
Basically we need to identify a virus that is characterized by the ASCII
characters "hastings_Beer", UDP ports 11664 to 11666, and the ID of the virus
begins on the third character.

Here is what I did:

ROUTER#ip nbar custom Hastings_Beer 3 ascci Hastings_Beer udp range 11664 11666

However, the answer says:

 ROUTER#ip nbar custom Hastings_Beer 2 ascci Hastings_Beer udp range 11664
11666

I looked at the examples on the DOCCD and it appears my answer is correct by
using 3 as the offset value as the ID of the virus is located there.

Any help on this would be great. Thanks! Mike P.

Blogs and organic groups at http://www.ccie.net

• Next message: Scott Morris: "RE: BGP damping"
• Previous message: keith tokash: "RE: Cisco Assessor Lab"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Mon Sep 01 2008 - 08:15:29 ART