zeek/testing/btest/Baseline/signatures.udp-state/reject
Jon Siwek 5904d0708f GH-779: Add "udp-state" signature condition
It accepts "originator" or "responder" states as a way to enforce that
the signature only matches packets in the associated direction.
The "established" state is rejected as an error since it doesn't
have a useful meaning like it does for the "tcp-state" condition.
2020-10-09 13:43:17 -07:00

2 lines
93 B
Text

error: Error in signature (udp-established.sig:5): 'established' is not a valid 'udp-state'