]> git.ipfire.org Git - thirdparty/suricata.git/commit
modbus: duplicate alerts unaware of direction 3230/head
authorDavid DIALLO <david.diallo@gmail.com>
Wed, 7 Feb 2018 23:20:09 +0000 (00:20 +0100)
committerVictor Julien <victor@inliniac.net>
Fri, 9 Feb 2018 14:39:53 +0000 (15:39 +0100)
commit6c643d8975e9bab542ef5583d1422d5e669188df
tree9a875b262022c722502f6d22e10d25593e694202
parent92b537d02861001434bf88e86d2f2b4f1a4094cf
modbus: duplicate alerts unaware of direction

Remove DetectAppLayerInspectEngineRegister for TOCLIENT direction
because Modbus inspection engine is only performing in request (TOSERVER).

Detect Value keyword in read access rule. In read access, match on value
is not possible.

Update Modbus keyword documentation.
doc/userguide/rules/modbus-keyword.rst
src/detect-modbus.c