Commit Graph

2 Commits (20df715e64ccab00c6f6778e1453b051aee7be17)

Author SHA1 Message Date
Philippe Antoine 02f2602dde src: rework includes as per cppclean 4 years ago
Eric Leblond cbce2c78bd detect-ftpdata: match on ftp-data operation
This keyword mathes on ftp operation STOR and RETR. It will allow
rules writer to select if the alert has to be on a put or a fetch
operation.

It is now possible to write a signature like:

  alert ftp-data any any -> any any (msg:"FTP data get firwmare"; ftdata_command:retr; sid:2; rev:1;)

to alert when a file is retrieved from a FTP server.
9 years ago