Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
DIALLO David 5a0409959f App-layer: Add Modbus protocol parser
Decode Modbus request and response messages, and extracts
MODBUS Application Protocol header and the code function.

In case of read/write function, extracts message contents
(read/write address, quantity, count, data to write).

Links request and response messages in a transaction according to
Transaction Identifier (transaction management based on DNS source code).

MODBUS Messaging on TCP/IP Implementation Guide V1.0b
(http://www.modbus.org/docs/Modbus_Messaging_Implementation_Guide_V1_0b.pdf)
MODBUS Application Protocol Specification V1.1b3
(http://www.modbus.org/docs/Modbus_Application_Protocol_V1_1b3.pdf)

Based on DNS source code.

Signed-off-by: David DIALLO <diallo@et.esia.fr>
11 years ago
benches
contrib
doc
lua
m4
qa Suppress ARM valgrind warning 11 years ago
rules App-layer: Add Modbus protocol parser 11 years ago
scripts
src App-layer: Add Modbus protocol parser 11 years ago
.gitignore
.travis.yml
COPYING
ChangeLog Update Changelog for 2.1beta2 release 11 years ago
LICENSE
Makefile.am App-layer: Add Modbus protocol parser 11 years ago
Makefile.cvs
acsite.m4
autogen.sh
classification.config
config.rpath
configure.ac pfring: checks if the lib version is >= 6 11 years ago
doxygen.cfg
reference.config
suricata.yaml.in App-layer: Add Modbus protocol parser 11 years ago
threshold.config