mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
9c4e44924f
Or more generally, signatures would not work correctly for any case where the first TCP packet seen contained payload data, regardless of its TCP flags.
1 line
136 B
Text
1 line
136 B
Text
signature_match [orig_h=10.99.99.1, orig_p=55534/tcp, resp_h=10.99.99.45, resp_p=80/tcp] - payload of dst-port=80/tcp contains 'passwd'
|