SURICATA TRAFFIC-ID: Ubuntu APT-GET

SID: 300000001Rev: 0Enabled16 views
Filetrafficid.rules
CreatedApril 26, 2019
UpdatedApril 26, 2019
alert http any any -> any any (msg:"SURICATA TRAFFIC-ID: Ubuntu APT-GET"; content:"ubuntu.com"; http_host; content:"Debian APT"; http_user_agent; flow:to_server,established; flowbits:set,traffic/id/ubuntu-apt; flowbits:set,traffic/label/software-update; noalert; sid:300000001;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!