aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

stream/rules: add example rule for reassembly depth

Browse Source 
Issue: 3512
pull/7703/head
Jeff Lucovsky 3 years ago committed by Victor Julien
parent e133ab029e
commit 4aa4ad3f74
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File

3
rules/stream-events.rules
Unescape Escape View File

@ -98,5 +98,6 @@ alert tcp any any -> any any (msg:"SURICATA STREAM FIN SYN reuse"; stream-event:
# Disabled by default as this quite common and not malicious.
#alert tcp any any -> any any (msg:"SURICATA STREAM spurious retransmission"; stream-event:pkt_spurious_retransmission; classtype:protocol-command-decode; sid:2210061; rev:1;)
# next sid 2210062
alert tcp any any -> any any (msg:"SURICATA STREAM reassembly depth reached"; stream-event:reassembly_depth_reached; classtype:protocol-command-decode; sid:2210062; rev:1;)
# next sid 2210063

Write Preview
Loading…
Cancel
Save