Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-10 18:48:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fixed some DPD signatures for IRC. Fixes ticket #311.

Browse source 
- The larger issue from ticket 313 still stands.
This commit is contained in:
Seth Hall 2011-12-10 22:33:49 -05:00
parent 6478b4acaf
commit 76a0b9ad3c
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/base/frameworks/dpd/dpd.sig
View file

@ -80,15 +80,15 @@ signature irc_server_reply {
tcp-state responder tcp-state responder
} }
signature irc_sig3 { signature irc_server_to_server1 {
ip-proto == tcp ip-proto == tcp
payload /(.*\x0a)*(\x20)*[Ss][Ee][Rr][Vv][Ee][Rr](\x20)+.+\x0a/ payload /(|.*[\r\n]) *[Ss][Ee][Rr][Vv][Ee][Rr] +[^ ]+ +[0-9]+ +:.+[\r\n]/
} }
signature irc_sig4 { signature irc_server_to_server2 {
ip-proto == tcp ip-proto == tcp
payload /(.*\x0a)*(\x20)*[Ss][Ee][Rr][Vv][Ee][Rr](\x20)+.+\x0a/ payload /(|.*[\r\n]) *[Ss][Ee][Rr][Vv][Ee][Rr] +[^ ]+ +[0-9]+ +:.+[\r\n]/
requires-reverse-signature irc_sig3 requires-reverse-signature irc_server_to_server1
enable "irc" enable "irc"
} }