Support #2967
closed
Added by José Monteiro about 5 years ago.
Updated almost 5 years ago.
Description
Hi guys,
I've enabled Modbus in the configuration file and tested Suricata with both Modbus rules with the pcap attached, but it doesn't generate any alert.
Could you give me an example of a functioning Modbus rule?
Thank you
Files
Does it work if you add '-k none' to your commandline? The pcap is full of bad checksums.
Victor Julien wrote:
Does it work if you add '-k none' to your commandline? The pcap is full of bad checksums.
I already tried that but it didn't work also.
Does anyone have suggestions or can give an example of a Modbus rule?
- Assignee set to Community Ticket
- Target version set to Support
- Status changed from New to Closed
- Assignee deleted (
Community Ticket)
- Target version deleted (
Support)
Also available in: Atom
PDF