Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-04 15:48:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Added a DPD signature for AYIYA, but it's crashing Bro.

Browse source
This commit is contained in:
Seth Hall 2012-04-21 15:25:19 -04:00
parent 69ab13c88f
commit dff3fabcea
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
scripts/base/frameworks/dpd/dpd.sig
View file

@ -149,3 +149,9 @@ signature dpd_ssl_client {
payload /^(\x16\x03[\x00\x01\x02]..\x01...\x03[\x00\x01\x02]|...?\x01[\x00\x01\x02][\x02\x03]).*/ payload /^(\x16\x03[\x00\x01\x02]..\x01...\x03[\x00\x01\x02]|...?\x01[\x00\x01\x02][\x02\x03]).*/
tcp-state originator tcp-state originator
} }
#signature dpd_ayiya {
# ip-proto = udp
# payload /^..\x11\x29/
# enable "ayiya"
#}