zeek/scripts/base/protocols/ntp/dpd.sig
2019-06-03 17:50:32 +02:00

12 lines
213 B
Standard ML

signature dpd_ntp {
ip-proto == udp
# ## TODO: Define the payload. When Bro sees this regex, on
# ## any port, it will enable your analyzer on that
# ## connection.
# ## payload /^NTP/
enable "ntp"
}