mirror of https://github.com/OISF/suricata
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
26 lines
404 B
ReStructuredText
26 lines
404 B
ReStructuredText
7 years ago
|
Kerberos Keywords
|
||
|
|
=================
|
||
|
|
|
||
|
|
krb5_msg_type
|
||
|
|
-------------
|
||
|
|
|
||
|
|
Kerberos message type (integer).
|
||
|
|
|
||
|
|
Values are defined in RFC4120. Common values are
|
||
|
|
|
||
|
|
* 10 (AS-REQ)
|
||
|
|
* 11 (AS-REP)
|
||
|
|
* 12 (TGS-REQ)
|
||
|
|
* 13 (TGS-REP)
|
||
|
|
* 14 (AP-REQ)
|
||
|
|
* 15 (AP-REP)
|
||
|
|
* 30 (ERROR)
|
||
|
|
|
||
|
|
Syntax::
|
||
|
|
|
||
|
|
krb5_msg_type:<number>
|
||
|
|
|
||
|
|
Signature example::
|
||
|
|
|
||
|
|
alert krb5 any any -> any any (msg:"Kerberos 5 AS-REQ message"; krb5_msg_type:10; sid:3; rev:1;)
|