[c-nsp] IPS Strangeness in 12.3T

Brian Vowell brian at zipsend.net
Sat Feb 19 21:24:37 EST 2005


All the CCO docs on IPS show a single attack-drop.sdf file for holding 
the IPS signatures.  On CCO, the latest signatures are in a file called 
IOS-S142.zip, which contains two XML files.  Anyone know how to 
configure these newer signature files for use on 12.3(11)T3?

Also, when I load the older attack-drop.sdf file onto my 2821 router, I 
get a bunch of errors about invalid attributes, and most of the 
signatures don't load.  Am I missing something?


--b


More information about the cisco-nsp mailing list