mirror of https://github.com/OISF/suricata
				
				
				
			
			You cannot select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
	
	
		
			9 lines
		
	
	
		
			544 B
		
	
	
	
		
			Plaintext
		
	
			
		
		
	
	
			9 lines
		
	
	
		
			544 B
		
	
	
	
		
			Plaintext
		
	
# QUIC app-layer event rules.
 | 
						|
#
 | 
						|
# These SIDs fall in the 2231000+ range. See:
 | 
						|
#    http://doc.emergingthreats.net/bin/view/Main/SidAllocation and
 | 
						|
#    https://redmine.openinfosecfoundation.org/projects/suricata/wiki/AppLayer
 | 
						|
 | 
						|
alert quic any any -> any any (msg:"SURICATA QUIC failed decrypt"; app-layer-event:quic.failed_decrypt; classtype:protocol-command-decode; sid:2231000; rev:1;)
 | 
						|
alert quic any any -> any any (msg:"SURICATA QUIC error on data"; app-layer-event:quic.error_on_data; classtype:protocol-command-decode; sid:2231001; rev:1;)
 |