zeek/scripts/policy/misc/detect-traceroute/detect-low-ttls.sig

9 lines
148 B
Standard ML

signature traceroute-detector-ipv4 {
header ip[8] < 10
event "match"
}
signature traceroute-detector-ipv6 {
header ip6[7] < 10
event "match"
}