You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rules
Jason Ish a6d950315d dnp3: bound the maximum number of objects per tx
Default to 2048, but provide a user configuration value.

Ticket: #8181
(cherry picked from commit 2c95f1ff44)
5 days ago
..
Makefile.am rfb: never return error on unknown traffic 3 years ago
README.md
app-layer-events.rules
decoder-events.rules af-packet: add event for packets truncated by af-packet 10 months ago
dhcp-events.rules
dnp3-events.rules dnp3: bound the maximum number of objects per tx 5 days ago
dns-events.rules dns: provide events for recoverable parse errors 1 year ago
files.rules
ftp-events.rules
http-events.rules http: have a headers limit 1 year ago
http2-events.rules http2: forbid data on stream 0 6 months ago
ipsec-events.rules rules/ike: fix ike event names that have changed 1 year ago
kerberos-events.rules
modbus-events.rules rules/modbus: remove rule for event that not longer exists 1 year ago
mqtt-events.rules
nfs-events.rules
ntp-events.rules
quic-events.rules quic: handle fragmented hello over multiple packets 11 months ago
rfb-events.rules rfb: never return error on unknown traffic 3 years ago
smb-events.rules
smtp-events.rules
ssh-events.rules
stream-events.rules stream: add TCP urgent handling options 1 year ago
tls-events.rules

README.md

Suricata Reserved SID Allocations

Unless otherwise noted, each component or protocol is allocated 1000 signature IDs.

Components

Component Start End
Decoder 2200000 2200999
Stream 2210000 2210999
Generic App-Layer 2260000 2260999

App-Layer Protocols

Protocol Start End
SMTP 2220000 2220999
HTTP 2221000 2221999
NTP 2222000 2222999
NFS 2223000 2223999
IPsec 2224000 2224999
SMB 2225000 2225999
Kerberos 2226000 2226999
DHCP 2227000 2227999
SSH 2228000 2228999
MQTT 2229000 2229999
TLS 2230000 2230999
QUIC 2231000 2231999
FTP 2232000 2232999
DNS 2240000 2240999
MODBUS 2250000 2250999
DNP3 2270000 2270999
HTTP2 2290000 2290999