]> git.ipfire.org Git - thirdparty/suricata-verify.git/commitdiff
quic: adds signature for parsing check
authorPhilippe Antoine <contact@catenacyber.fr>
Fri, 28 Oct 2022 20:09:45 +0000 (22:09 +0200)
committerCatena cyber <35799796+catenacyber@users.noreply.github.com>
Mon, 21 Nov 2022 19:50:10 +0000 (20:50 +0100)
tests/quic-ietf/test.rules

index 25d1489ab832083be11bc786a393e9a24a423a07..96a0bd4d6987ff8595aed40226a67eddaa4b5bcd 100644 (file)
@@ -1,2 +1,3 @@
 alert quic any any -> any any (msg:"QUIC SNI"; quic.sni; content:"msquic.net"; sid:4;)
 alert quic any any -> any any (msg:"QUIC JA3"; ja3.string; content:"771,4866,43-51-41"; sid:3;)
+alert quic any any -> any any (msg:"QUIC JA3 HASH"; ja3.hash; content:"deadbeefdeadbeefdeadbeefdeadbeef"; sid:5;)