You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
suricata/rules
Victor Julien 660c1de7ba stream: set event for suspected data injection during 3whs
This rule will match on the STREAM_3WHS_ACK_DATA_INJECT, that is
set if we're:
- in IPS mode
- get a data packet from the server
- that matches the exact SEQ/ACK expectations for the 3whs

The action of the rule is set to drop as the stream engine will drop.
So the rule action is actually not needed, but for consistency it
is drop.
7 years ago
..
Makefile.am rust/nfs: implement events 8 years ago
app-layer-events.rules app-layer: protocol change API 8 years ago
decoder-events.rules decoder: implement IEEE802.1AH 7 years ago
dnp3-events.rules rules: add missing classtypes for event.rules 8 years ago
dns-events.rules rules: add missing classtypes for event.rules 8 years ago
files.rules
http-events.rules
modbus-events.rules rules: add missing classtypes for event.rules 8 years ago
nfs-events.rules rust/nfs: implement events 8 years ago
ntp-events.rules Add event rules for NTP events 8 years ago
smtp-events.rules app-layer-smtp: fix memory leak 9 years ago
stream-events.rules stream: set event for suspected data injection during 3whs 7 years ago
tls-events.rules tls: increase max number of tls records per packet 8 years ago