Configuring Application Fingerprinting AFP Defaults
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 30-2
AFP Defaults
Default REGEX Application Signatures
The default “app-signature.txt” file provided in the “/flash/app-signature/” directory on the switch contains
the following sample REGEX application signatures and groups (see “Using the Application REGEX
Signature File” on page 30-7 for more information):
Description Keyword Default
The status of AFP functionality on
the switch.
app-fingerprint admin-state Enabled
The status of AFP activation on
switch ports and link aggregates.
app-fingerprint port Disabled
ASCII text file containing REGEX
application signatures.
app-fingerprint signature-file flash/app-signature/
app-regex.txt
Trap generation when IP traffic
flow matches an application
signature
app-fingerprint trap Disabled
Application REGEX Signatures
App Name: bgp
Description: Border Gateway Protocol
\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff..?\x01[\x03\x04]
App Name: ciscovpn
Description: VPN client software to a Cisco VPN server
\x01\xf4\x01\xf4
App Name: citrix
Description: Citrix ICA - proprietary remote desktop application
\x32\x26\x85\x92\x58
App Name: dhcp
Description: Dynamic Host Configuration Protocol
[\x01\x02][\x01- ]\x06.*c\x82sc
App Name: hotline
Description: Hotline - P2P filesharing protocol,
TRTPHOTL\x01\x02
App Name: jabber
Description: open instant messenger protocol
<stream:stream[\x09-\x0d ][ -~]*[\x09-\x0d ]xmlns=['"]jabber
App Name: rdp
Description: Remote Desktop Protocol,
rdpdr.*cliprdr.*rdpsnd
App Name: rtsp
Description: Real Time Streaming Protocol,
rtsp/1.0 200 ok
App Name: sip
Description: Session Initiation Protocol,
(invite|register|cancel|message|subscribe|notify) sip[\x09-\x0d -~]*sip/[0-2]\.
[0-9]
App Name: smb
Description: Samba - Server Message Block,
\xffsmb[\x72\x25]
To Next Page
Loading...
Need help?
General
