mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
15 lines
247 B
Standard ML
15 lines
247 B
Standard ML
|
|
# DNP3 packets always starts with 0x05 0x64 .
|
|
|
|
signature dpd_dnp3_server {
|
|
ip-proto == tcp
|
|
payload /\x05\x64/
|
|
tcp-state responder
|
|
enable "dnp3_tcp"
|
|
}
|
|
|
|
signature dpd_dnp3_server_udp {
|
|
ip-proto == udp
|
|
payload /\x05\x64/
|
|
enable "dnp3_udp"
|
|
}
|