Project

General

Profile

Actions
Copy link

Support #2967

closed

Modbus Alerts

Added by José Monteiro about 5 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Affected Versions:
4.1.3
Label:
Beginner

Description

Hi guys,
I've enabled Modbus in the configuration file and tested Suricata with both Modbus rules with the pcap attached, but it doesn't generate any alert.
Could you give me an example of a functioning Modbus rule?

Thank you

Files

Download all files
modbus1.pcapng (2.95 KB) modbus1.pcapng José Monteiro, 05/06/2019 05:00 PM
local.rules (161 Bytes) local.rules José Monteiro, 05/06/2019 05:27 PM
Actions
Copy link

Also available in: Atom PDF