- imap (detection only by default; no parsing)
- ftp
- modbus (disabled by default; minimalist probe parser; can lead to false positives)
- - msn (detection only by default; no parsing)
- smb
- smb2 (disabled internally inside the engine)
- smtp
* ssh
* smtp
* imap
-* msn
* modbus (disabled by default)
* dnp3 (disabled by default)
* enip (disabled by default)
printf(" alproto: ALPROTO_SSH\n");
else if (pp_pe->alproto == ALPROTO_IMAP)
printf(" alproto: ALPROTO_IMAP\n");
- else if (pp_pe->alproto == ALPROTO_MSN)
- printf(" alproto: ALPROTO_MSN\n");
else if (pp_pe->alproto == ALPROTO_JABBER)
printf(" alproto: ALPROTO_JABBER\n");
else if (pp_pe->alproto == ALPROTO_SMB)
printf(" alproto: ALPROTO_SSH\n");
else if (pp_pe->alproto == ALPROTO_IMAP)
printf(" alproto: ALPROTO_IMAP\n");
- else if (pp_pe->alproto == ALPROTO_MSN)
- printf(" alproto: ALPROTO_MSN\n");
else if (pp_pe->alproto == ALPROTO_JABBER)
printf(" alproto: ALPROTO_JABBER\n");
else if (pp_pe->alproto == ALPROTO_SMB)
"imap");
}
- /** MSN Messenger */
- AppLayerProtoDetectRegisterProtocol(ALPROTO_MSN, "msn");
- if (AppLayerProtoDetectConfProtoDetectionEnabled("tcp", "msn")) {
- if (AppLayerProtoDetectPMRegisterPatternCS(IPPROTO_TCP, ALPROTO_MSN,
- "msn", 10, 6, STREAM_TOSERVER) < 0)
- {
- SCLogInfo("msn proto registration failure");
- exit(EXIT_FAILURE);
- }
- } else {
- SCLogInfo("Protocol detection and parser disabled for %s protocol.",
- "msn");
- }
-
ValidateParsers();
return;
}
case ALPROTO_IMAP:
proto_name = "imap";
break;
- case ALPROTO_MSN:
- proto_name = "msn";
- break;
case ALPROTO_JABBER:
proto_name = "jabber";
break;
if (strcmp(proto_name,"tls")==0) return ALPROTO_TLS;
if (strcmp(proto_name,"ssh")==0) return ALPROTO_SSH;
if (strcmp(proto_name,"imap")==0) return ALPROTO_IMAP;
- if (strcmp(proto_name,"msn")==0) return ALPROTO_MSN;
if (strcmp(proto_name,"jabber")==0) return ALPROTO_JABBER;
if (strcmp(proto_name,"smb")==0) return ALPROTO_SMB;
if (strcmp(proto_name,"dcerpc")==0) return ALPROTO_DCERPC;
ALPROTO_TLS, /* SSLv2, SSLv3 & TLSv1 */
ALPROTO_SSH,
ALPROTO_IMAP,
- ALPROTO_MSN,
ALPROTO_JABBER,
ALPROTO_SMB,
ALPROTO_DCERPC,
content-inspect-window: 4096
imap:
enabled: detection-only
- msn:
- enabled: detection-only
smb:
enabled: yes
detection-ports: