aiden
/
suricata
mirror of https://github.com/OISF/suricata
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

docs: fix statement about flow:to_server

Browse Source
pull/2634/head
Jon Zeolla 9 years ago committed by Victor Julien
parent 528721fd12
commit 598a7187c3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File

2
doc/userguide/reputation/ipreputation/ip-reputation-rules.rst
Unescape Escape View File

@ -28,7 +28,7 @@ Example:
alert ip $HOME_NET any -> any any (msg:"IPREP internal host talking to CnC server"; flow:to_server; iprep:dst,CnC,>,30; sid:1; rev:1;)
This rule will alert when a system in $HOME_NET performs a client request while communicating with any IP in the CnC category that has a reputation score set to greater than 30.
This rule will alert when a system in $HOME_NET acts as a client while communicating with any IP in the CnC category that has a reputation score set to greater than 30.
IP-only
~~~~~~~

Write Preview
Loading…
Cancel
Save