Modified:
- .gitignore: ignoring lua files
- suricata.rules: added a rule to log every packet
- suricata.yaml: specified alerts to dump whole
packet bytes
3 lines
268 B
Plaintext
3 lines
268 B
Plaintext
alert ip any any -> any any (msg:"GPL ATTACK_RESPONSE id check returned root"; content:"uid=0|28|root|29|"; classtype:bad-unknown; sid:2100498; rev:7; metadata:created_at 2010_09_23, updated_at 2010_09_23;)
|
|
alert ip any any -> any any (msg:"General Logging"; sid:12;)
|