I'm planning on going to CCIE SEC exam soon, and would appriciate if anyone can help me in solving the below signature question:
A custom signature 60000 is required on the Cisco IPS sensor as follows:
Trigger - Whenever it detects an OSPF Hello packets .
Action – Produce verbose Alert when OSPF Packet is detected
Alert-severity – High