Jun
14
Flexible Packet Matching is a new feature that allows for granular packet inspection in Cisco IOS routers. Using FPM you can match any string, byte or even bit at any position in the IP (or theoretically non-IP) packet. This may greatly aid in identifying and blocking network attacks using static patterns found in the attack traffic. This feature has some limitation though. a) First, it is completely stateless, e.g. does not track the state/history of the packet flow. Thus, FPM cannot discover... Read More

Subscribe to INE Blog Updates

New Blog Posts!