Which signature action should be selected to cause the attackers traffic flow to terminate when the Cisco IPS appliance is operating in promiscuous mode?