From dff3fabcea13d83caf68c985cac5ca8c049c657a Mon Sep 17 00:00:00 2001
From: Seth Hall <seth@icir.org>
Date: Sat, 21 Apr 2012 15:25:19 -0400
Subject: [PATCH] Added a DPD signature for AYIYA, but it's crashing Bro.

---
 scripts/base/frameworks/dpd/dpd.sig | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/scripts/base/frameworks/dpd/dpd.sig b/scripts/base/frameworks/dpd/dpd.sig
index adda0ce54e..8408d7617a 100644
--- a/scripts/base/frameworks/dpd/dpd.sig
+++ b/scripts/base/frameworks/dpd/dpd.sig
@@ -149,3 +149,9 @@ signature dpd_ssl_client {
   payload /^(\x16\x03[\x00\x01\x02]..\x01...\x03[\x00\x01\x02]|...?\x01[\x00\x01\x02][\x02\x03]).*/
   tcp-state originator
 }
+
+#signature dpd_ayiya {
+#  ip-proto = udp
+#  payload /^..\x11\x29/
+#  enable "ayiya"
+#}