From: Victor Julien Date: Mon, 30 Jan 2023 13:32:28 +0000 (+0100) Subject: decoder: mention removal of udp.hlen_invalid sig X-Git-Tag: suricata-7.0.0-rc1~7 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0303bb1f9c0f5fce06d388e053a6176f1ebfe0bb;p=thirdparty%2Fsuricata.git decoder: mention removal of udp.hlen_invalid sig --- diff --git a/rules/decoder-events.rules b/rules/decoder-events.rules index bcdbe07856..e3f1e30bfa 100644 --- a/rules/decoder-events.rules +++ b/rules/decoder-events.rules @@ -67,6 +67,7 @@ alert pkthdr any any -> any any (msg:"SURICATA TCP option invalid length"; decod alert pkthdr any any -> any any (msg:"SURICATA TCP duplicated option"; decode-event:tcp.opt_duplicate; classtype:protocol-command-decode; sid:2200037; rev:2;) alert pkthdr any any -> any any (msg:"SURICATA UDP packet too small"; decode-event:udp.pkt_too_small; classtype:protocol-command-decode; sid:2200038; rev:2;) alert pkthdr any any -> any any (msg:"SURICATA UDP header length too small"; decode-event:udp.hlen_too_small; classtype:protocol-command-decode; sid:2200039; rev:2;) +# 2200040 "udp.hlen_invalid" has been retired. alert pkthdr any any -> any any (msg:"SURICATA UDP invalid length field in the header"; decode-event:udp.len_invalid; classtype:protocol-command-decode; sid:2200120; rev:2;) alert pkthdr any any -> any any (msg:"SURICATA SLL packet too small"; decode-event:sll.pkt_too_small; classtype:protocol-command-decode; sid:2200041; rev:2;) alert pkthdr any any -> any any (msg:"SURICATA Ethernet packet too small"; decode-event:ethernet.pkt_too_small; classtype:protocol-command-decode; sid:2200042; rev:2;)