Custom signature for TOR Application

Hi,
I want to create custom signature to produce alert whenever any machine lunches TOR application, i have searched and found that there already two signatures cretaed 5816/0 5816/1, i have enabled them and tested it did not fire.
I have ips in promoscous mode monitoring all vlans, working normally. I dont have ssl interception @ any device, so once TOR is establish then i dont have visibilty over the traffic.
i need help in creating usch signature, i have took wireshark capture of traffic and all i can see on application layer is proxy connect and proxy port (see attached)
thanks for your help.                

Hi nkumarsr,
I have cretaed tcp string signature for ports 9001, 9090
and also i have added it in builtin signature 5816/0 and 5816/1
i have luanch TOR and it is not fired, i took capture on client PC and seached for tcp.port == 9001 and 9090, it is not showing.
do u have any other ideas ?

Similar Messages

  • Lenovo NeXtScale N1200 Enclosure is a customized solutions for your applications

    QuestionDo you need a customized solutions for your applications?
    AnswerLenovo NeXtScale N1200 Enclosure is a customized solutions for your applications that can be configured to meet your specific business needs. Lenovo NeXtScale N1200 Enclosure is the best solution for optimum compute power, GPU acceleration, maximum compute power, GPU or coprocessor and storage with the right I/O and networking. Since the NeXtScale platform is optimized for standard racks, it allows the mixing of high-density NeXtScale server offerings and non NeXtScale components within the same cluster rack. Lenovo NeXtScale System is comprised of compute nodes and chassis. The compute node is the nx360 M5 and the chassis the n1200 Enclosure.  The chassis can house up to 12 half-wide nx360 M4 and nx360 M5 nodes. The Lenovo n1200 enclosure is a light chassis without integrated networking or switching. As a result, no chassis-level management is required.  The nodes in the chassis with front access cabling would connect to top-of-rack switches installed in the same rack. Lenovo NeXtScale System is the data center solution for clients who are facing challenges such as physical space, budget, and low productivity due to late production readiness. Lenovo delivers NeXtScale, a dense platform that not only is cost optimized but also provides tremendous time to value by helping clients get on-board more quickly.

    Thanks for the suggestion.
    One concern I have is this package is developed for v12.0. According to SAP, these action blocks will work in 12.1 but not in 12.2. I've tried to install it on 12.2. The configuration dialog are not working properly.
    Have anybody succefully implemented this package on 12.2?
    Best regards,
    Arnold
    Edited by: Brad Arnold on Mar 2, 2012 11:53 PM
    Edited by: Brad Arnold on Mar 2, 2012 11:55 PM

  • Default Code Generation for a Custom Class for an Application Module

    hi all
    Oracle® Fusion Middleware
    Fusion Developer’s Guide for Oracle Application Development
    Framework
    11g Release 1 (11.1.1)
    with Jdeveloper TP3 ,
    By default, the application module Java class will look similar to what you see in
    Example below when you've first enabled it. Of interest, it contains:
    ■ Getter methods for each view object instance in the data model
    ■ A main() method allowing you to debug the application module using the
    Business Components Browser
    [package devguide.model;
    import devguide.model.common.StoreServiceAM;
    import oracle.jbo.server.ApplicationModuleImpl;
    import oracle.jbo.server.ViewLinkImpl;
    import oracle.jbo.server.ViewObjectImpl;
    // --- File generated by Oracle ADF Business Components Design Time.
    // --- Custom code may be added to this class.
    // --- Warning: Do not modify method signatures of generated methods.
    public class StoreServiceAMImpl extends ApplicationModuleImpl {
    /** This is the default constructor (do not remove) */
    public SRServiceImpl() { }
    /** Sample main for debugging Business Components code using the tester */
    public static void main(String[] args) {
    launchTester("devguide.model", /* package name */
    "SRServiceLocal" /* Configuration Name */);
    /** Container's getter for YourViewObjectInstance1 */
    public ViewObjectImpl getYourViewObjectInstance1() {
    return (ViewObjectImpl)findViewObject("YourViewObjectInstance1");
    // ... Additional ViewObjectImpl getters for each view object instance
    // ... ViewLink getters for view link instances here
    when i try this i didn't find the default generation for main method
    have i do something before enable custom java file for Application module
    hope to hear from you soon

    hi nonStop
    Since you are using Jdeveloper TP3, this might be a better place to ask your question:
    "JDeveloper and OC4J 11g Technology Preview"
    JDeveloper and OC4J 11g Technology Preview
    success
    Jan Vervecken

  • 9.7.3 Default Code Generation for a Custom Class for an Application Module

    hi all
    Oracle® Fusion Middleware
    Fusion Developer’s Guide for Oracle Application Development
    Framework
    11g Release 1 (11.1.1)
    with Jdeveloper TP3 ,
    By default, the application module Java class will look similar to what you see in
    Example below when you've first enabled it. Of interest, it contains:
    ■ Getter methods for each view object instance in the data model
    ■ A main() method allowing you to debug the application module using the
    Business Components Browser
    [package devguide.model;
    import devguide.model.common.StoreServiceAM;
    import oracle.jbo.server.ApplicationModuleImpl;
    import oracle.jbo.server.ViewLinkImpl;
    import oracle.jbo.server.ViewObjectImpl;
    // --- File generated by Oracle ADF Business Components Design Time.
    // --- Custom code may be added to this class.
    // --- Warning: Do not modify method signatures of generated methods.
    public class StoreServiceAMImpl extends ApplicationModuleImpl {
    /** This is the default constructor (do not remove) */
    public SRServiceImpl() { }
    /** Sample main for debugging Business Components code using the tester */
    public static void main(String[] args) {
    launchTester("devguide.model", /* package name */
    "SRServiceLocal" /* Configuration Name */);
    /** Container's getter for YourViewObjectInstance1 */
    public ViewObjectImpl getYourViewObjectInstance1() {
    return (ViewObjectImpl)findViewObject("YourViewObjectInstance1");
    // ... Additional ViewObjectImpl getters for each view object instance
    // ... ViewLink getters for view link instances here
    when i try this i didn't find the default generation for main method
    have i do something before enable custom java file for Application module
    hope to hear from you soon

    hi nonStop
    Since you are using Jdeveloper TP3, this might be a better place to ask your question:
    "JDeveloper and OC4J 11g Technology Preview"
    JDeveloper and OC4J 11g Technology Preview
    success
    Jan Vervecken

  • Custom Signature for Maximum Connections

    Hi, is there any signature for check the maximum number of connection that an attacker host can open to an Victim port? or I need to make a costom signature for that?

    Hi,
    You can definitly do that on the IPS, you would do this by making an atomic-ip signature looking for a tcp packet with only the SYN flag set to destination port 443. You would then add an event-count for the number of connections you need. Depending on the placement however this will flood the alarm channel with alerts, because outbound traffic etc will trigger this. Also obviously, this can be problematic with NAT.
    I'm sure one of the ASA guys on these forums could give a much better answer than me as far as configuring the ASA.
    From what i understand IIS has Dynamic IP filtering or something that can be used for this, although i've never set that up myself.
    Thanks
    Neil

  • XRPM: replace 'item dashboard' by customer webdynpro for abap application

    Hi guys,
    I want to replace my item dashboard application to be replaced by a customer WD4A. Within this application I will select from a tree structure a project.
    Now the questions: How to controll the standard context menu in the portal during this proces ? Do a need to call an API to get back my context menu ?
    Does anyone know ?
    Cheers, John

    Are you sure you want to entirely replaced the dashboard? If you're on 4.5 you can enhance allot of the RPM dashboard in the WD component /RPM/UI_DASHBOARD.
    You still have to fill the RPM cache object if you want to use the detail iViews for example Element Details.
    What exactly do you want to achieve?

  • How to create custom template for webcenter portal application

    Hi,
    I created webcenter portal application in my jdev using the webcenter portal application template provided by the webcenter framework.
    I tried to create custom template for my application by following steps:
    1. Created new application using webcenter portal application template with all default package structure.
    2. Right click pagetemplates folder under webcontent package and select new option.
    3. New gallery opens up.
    4. Selected JSF under webtier and JSF Page Template under items in the right hand side and clicked Ok button.
    5. New wizard opens up for creating new JSF page template.
    6. Gave template name(file name) and Page Template Name(template def name).
    7. Selected checkbox staing start a Quick Start Layout and selected three column layout and selected Ok.
    8. Selected checkbox for Create Associated ADFm Page Defination(so that page templates can be changes at run time).
    9. Created some Facet Definations (header, footer, content1, content2, LHN, RHN).
    10. Clicked Ok button which will create custom template.
    11. Added some Panel Group Layout component from Component Palette.
    12. Created new page (.jspx) with this template.
    Now when I try to add producer portlets created using Producer Portlet application template and connected to the above application using WSRP2.0, I'm facing problem.
    The prolem is that I'm not able to add more than one portlet in one single page?
    Kindly let me know whether the steps followed by me is wrong some where and needs to corrected and let me know how I can add more than one portlet to page?
    Basically I cant see more than one placeholders in my page to add portlets.

    Thanks Yannick.
    In the step 9 I had mentioned that I created various facet definations (header, footer, content, content1 RHN and LHN).
    Is this is not facet you are talking about or should I drop facet ref from the resource palette?
    Can't I add moer than one portlet to my page at design time itself?
    Annoying since in weblogic portal we do this at design time(.portal).

  • Regarding custom context created for CR_B2B application(Complaints&Returns)

    Hi,
    We have created a custom context for cr_b2b application.
    We are able to login to the application, but we are getting some compilation errors on the left hand side page (genericsearch.jsp)
    The errors are:
    ISA Framework: com.sap.engine.services.servlets_jsp.server.jsp.exceptions.CompilingException: Error while executing the compilation process: [/usr/sap/FWX/JC91/j2ee/cluster/server1/apps/sap.com/homecr_test/servlet_jsp/cr_test/work/jsp_genericsearch1285932156290.java:163: package com.sap.isa.isacore.uiclass.b2b does not exist com.sap.isa.isacore.uiclass.b2b.CreateTransactionUI l_ui = new com.sap.isa.isacore.uiclass.b2b.CreateTransactionUI(pageContext); ^ /usr/sap/FWX/JC91/j2ee/cluster/server1/apps/sap.com/homecr_test/servlet_jsp/cr_test/work/jsp_genericsearch1285932156290.java:163: package com.sap.isa.isacore.uiclass.b2b does not exist com.sap.isa.isacore.uiclass.b2b.CreateTransactionUI l_ui = new com.sap.isa.isacore.uiclass.b2b.CreateTransactionUI(pageContext); ^ 2 errors ].
    What would be the reason?  Some pointers on this would be of great help
    Thanks in Advance
    Regards,
    Satish.

    Hi Pradeep,
    I can see that the CreateTransactionUI class is part of sap.comcrmisaisacoredefault.jar.
    We tried to deploy this jar into this path:
    /usr/sap/FWX/JC91/j2ee/cluster/<server no>/apps/sap.com/home~cr_test/servlet_jsp/cr_test/root/WEB-INF/lib
    We have placed this file in all server nodes of the given path.
    But still error exists.
    What could be the reason?
    Thanks,
    Satish.

  • Custom signature

    I have scanned my handwritten signature for use with emails. I have been able to add this to my Outlook emails in the my office on a PC but have not been able to figure out how to create a custom signature for my iphone & ipad.
    Rob

    step 1: send your handwritten signature from your PC to your iphone and ipad.
    step 2: on your iphone and ipad, hold the picture and select copy
    step 3: Go to Settings > Mail, contacts and Calendars > Signature and paste the picture
    Done

  • IOS IPS Signatures for password guessing?

    I recently experienced a password-guessing attack. The inside Windows server's security was pretty well useless in stopping the attack (block, yes; stop, no), because the user ID kept changing, and Windows account lockout ignores source addresses. In this case, it was FTP, and I found an IPS signature for that, but it got me to thinking:
    There don't seem to be password-guessing signatures for RDP, HTTP, HTTPS, or SSL. Granted it may not be practical for HTTPS and SSL, but what about the other two? Should we consider rolling our own?

    You can configure custom signatures for IOS IPS using Security Monitor which is part of VMS. Below is a doc on how to do this:
    http://www.cisco.com/en/US/products/sw/cscowork/ps3990/products_user_guide_chapter09186a0080104f44.html#xtocid9
    Also try this link for Cisco Security Advisory
    http://www.cisco.com/en/US/products/products_security_advisory09186a008055dbdd.shtml

  • Trying to capture signature for Acrobat

    I scanned my signature and saved it as a tiff. So then opened it in PS CS4. Then cropped it and tried the magic wand to select around it to  eventually invert (blue ink on white background) but it wouldn't keep selecting around (holding shift key and clicking to keep selecting) it like I have done/accomplished many times before in PS 7.0 - I saved it to web/devices as jpg too but same thing. Is there somethig I'm doing wrong where it won't keep selecting around the image? I want to then invert it so I have a transparent image that I can change colors and stuff? My goal is to create a custom signature for  Acrobat.
    Thanks for your help!

    Another possibility is resetting the Magic Wand tool from the drop-down menu in the Options bar.
    If all else fails, try resetting your PS preferences as described in the FAQ.
    http://forums.adobe.com/thread/375776?tstart=0
    You either have to physically delete (or rename) the preference files or, if using the Alt, Ctrl, and Shift method, be sure that you get a confirmation dialog.
    This resets all settings in Photoshop to factory defaults.
    A complete uninstall/re-install will not affect the preferences and a corrupt file there may be causing the problem.

  • Custom Realm for SJSAS 9.x using JAAS documentation too vague

    Hello there,
    I am trying to implement a custom realm for a particular web application on my SJSAS 9.x server. So far I have been unsuccessful and receive the following message in my server.log:
    [#|2006-10-20T13:51:56.390-0300|INFO|sun-appserver-pe9.0|javax.enterprise.system.core.security|_ThreadID=11;_ThreadName=httpWorkerThread-8080-1;javious;|SEC5046: Audit: Authentication refused for [javious].|#]
    The documentation I have been using for reference is at:
    http://docs.sun.com/app/docs/doc/819-3659/6n5s6m58k?a=view#beabs
    However, I have a number of questions.
    First of all, this section referenced by the URL above is identified as "Creating a custom realm". Then the second sentence of this section states "Note that client-side JAAS login modules are not suitable for use with the Application Server". Does this not mean that JAAS login modules are not suitable for use with SJSAS web applications since they are components of the Application Server? Is there a reason for providing information on creating a custom realm for this application server in which it is not suitable for? Why isn't it suitable for the application server? What if I want to implement my own realm for my web application so that I can maintain my application users separately in another application?
    Secondly, this section explains that I can create a custom realm simply by creating a custom JAAS login module and a custom realm class. It then goes on to explain how to construct these classes and what to include in them. Notably, the documentation states the following:
    The authenticateUser() method must end with the following sequence:
    String[] grpList;
    // populate grpList with the set of groups to which
    // _username belongs in this realm, if any
    return commitUserAuthentication(_username, _password,
      _currentRealm, grpList);Having looked at the API for authenticateUser I discovered that it is a void method, however the documentation states to return a value from "commitUserAuthentication(..). Also, my commitUserAuthentication method only excepts a single argument of type String[] representing a list of group names, therefore I am unable to supply the additional arguments as documented. This is confusing.
    Once finished reading the documentation, I am left hanging with hardly a clue as to what to do with these two new classes. Now having implemented a custom login module on Tomcat 5.x in earlier days, I did happen to have some experience to know to edit the security.properties, policy, and login.conf files. So anyhow from here I end up stumbling blindly through configuration of my domain1/login.conf and domain1/server.policy files. I also attempted to add my new realm within the admin console under security/realms and dropped my new jar file (with two classes) into the app server lib directory.
    All in all, this completely fails to work. I have even placed System.out.println statements in all of my implemented methods and none of this actually shows up in my server.log file. Why is this section so vague? Why isn't there a step-by-step example from start to finish of how to implement a simple custom realm in SJSAS9?
    Does anybody have any helpful suggestions?

    Well, once again, I'm going to have to provide my own answer.
    After much waiting and then deciding to invest much time researching documentation and tracking down information to assist in my solution, I have manage to find the golden egg for my own recipe of a solution.
    In addition to the very helpful info I have found at:
    http://developers.sun.com/prodtech/appserver/reference/techart/as8_authentication/index.html
    I have mange to get my custom realm to work with the additional configuration of my sun-application.xml for my ear file. Even though I only wanted to specify my custom realm for my web.xml file, it turns out that in addition to this, I had to also define it in my sun-application.xml file (manually in XML text mode - within Netbeans 5.5) as follows:
    <sun-application>
        <realm>mycustrealm</realm>
        <security-role-mapping>
            <role-name>mycust_role</role-name>
            <group-name>mycust_group</group-name>
        </security-role-mapping>
    </sun-application>

  • Commands for Planning Applications in WAD?

    Hi all,
    Following the developers' guide on 'Business Planning and Analytical Services'  for 2004S we got stuck on assigning custom Commands for Planning Applications in WAD, which were created in the planning wizard.
    The option for 'Commands for Planning Applications' does NOT show up in the command wizard!
    is there a ABAP/Java stack pre-requisite for this or is there a new(?) authorisation object missing?
    Does it helps for others? On which Java Stack?
    Thx,
    Markus

    Check OSS note 948336.

  • Digital Signature Setup for Fusion Applications Saas Customers

    Hi,
    I have been reading in the Fusion Middleware book and I see that we can define the Digital Signature, but it looks like it can be done only in SOA.
    We have a customer that requires this information on how they can set it up in fusion applications and if it is supported for the SaaS customers ?
    Regards,
    Nag

    Can you elaborate on what the requirement is ? Are you trying to integrate with services using message protection or ? if so you may find the following documentation useful:
    Use Cases for Implementing Applications for Oracle Sales Cloud
    Software as a Service (SaaS) Documentation (Doc ID 870963.5)
    Jani Rautiainen
    Fusion Applications Developer Relations                              
    https://blogs.oracle.com/fadevrel/

  • Custom Icon for application file

    I can make director allow me to have a custom icon for appliacation file.
    In director I have attempted this several times where I have tried to have my appliaction file have an icon.  I have purchased two icon program Candy Bar and Fastincs trying to remedy this problem.
    As you see here I am using an ins file created in Fastincs.  Now here is an image to the path and the icon itself Applipcations/ Adobe Director 11/3 HorseLogo.mac.ins
    So there is the setup now when I complile for my program file I get this.
    See the grey Director icon I don't want that I want the three horse logo.
    I also tried to assign the logo after publishing the file.
    then I drag my icon file in
    The program created in director still wont see the icon file.
    If I use Candy bar (icon application)  I get a  different result. The icon works
    in both finder and on the task bar
    This is exactly what I want.
    I works until I try to move the entire package into an installer program  I am using BitRock.  When I compile the installation program then try to run the application I get the following message
    If I choose ignore the install continues.  But I have no icon.
    I am desperate , weeping , screaming , and almost a lost cause, any help any help at all I could really use.
    Thanks
    Robin aka innish

    Hi Robin,
    I'm more of a PC person rather than Mac. I would recommend you look at the Resource and Icon Editor page at:
    http://collab.directorforum.com/Resource_and_Icon_Editor
    It may fix your icon issue from Director.
    Dean

Maybe you are looking for

  • String value changes single quote ' to double quote "

    I am creating a list with different bill codes within single quotes as follows <cfset corlist = " '1100 ','1200 ','1300 ','1700 ','1800 ','1950 ','7001 ' "> when I do an output for <cfoutput>AND idbillcode IN ( #corlist #)</cfoutput> I get the values

  • How to build a content structure in DAM?

    Hi, I am a newbee developer in CQ. I have an article table which contains 6 fields as title, category#, autor, dateCreated, content, and imagePath. How should I build this database structure in DAM? In CRXDE Lite, I tried to create 20 article nodes m

  • Table name from structure name

    Hi experts can anyone tell me how to find the table name if structure name is known. when i press F1 in table field ,it give me struct name and field name. how can i find table name from this struct. Thanks in advance

  • PR Release Strategy for Account assignment cat "U"

    Is it possible to set up release strategy for Acct assignment Cat "U" - if yes, How would it be configured?  additionally we are also setting up Rel str for acct assign cat K and A - specific question is relative to "U" in addition to K and A. Other

  • Time machine will not back up home folder

    I have been using time machine and an external HD to back up my Macbook Pro for about two years, and yesterday I needed to recover an older version of a file in my Documents folder. I went into TM to find that it hasn't backed up my home folder in ov