Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Go to file
DIALLO David 5a0409959f App-layer: Add Modbus protocol parser
Decode Modbus request and response messages, and extracts
MODBUS Application Protocol header and the code function.

In case of read/write function, extracts message contents
(read/write address, quantity, count, data to write).

Links request and response messages in a transaction according to
Transaction Identifier (transaction management based on DNS source code).

MODBUS Messaging on TCP/IP Implementation Guide V1.0b
(http://www.modbus.org/docs/Modbus_Messaging_Implementation_Guide_V1_0b.pdf)
MODBUS Application Protocol Specification V1.1b3
(http://www.modbus.org/docs/Modbus_Application_Protocol_V1_1b3.pdf)

Based on DNS source code.

Signed-off-by: David DIALLO <diallo@et.esia.fr>
12 years ago
benches
contrib
doc Update docs from wiki 14 years ago
lua output-lua: add SCPacketTimeString 12 years ago
m4
qa Suppress ARM valgrind warning 12 years ago
rules App-layer: Add Modbus protocol parser 12 years ago
scripts suricatasc: add -c flag to run command 12 years ago
src App-layer: Add Modbus protocol parser 12 years ago
.gitignore
.travis.yml travis-ci: use make check 12 years ago
COPYING
ChangeLog Update Changelog for 2.1beta2 release 12 years ago
LICENSE
Makefile.am App-layer: Add Modbus protocol parser 12 years ago
Makefile.cvs
acsite.m4
autogen.sh
classification.config
config.rpath
configure.ac pfring: checks if the lib version is >= 6 12 years ago
doxygen.cfg doxygen: add source browser 12 years ago
reference.config
suricata.yaml.in App-layer: Add Modbus protocol parser 12 years ago
threshold.config