From: Tom Peters (thopeter) Date: Wed, 10 Nov 2021 17:21:38 +0000 (+0000) Subject: Pull request #3155: doc: update builtin alerts description for dnp3 X-Git-Tag: 3.1.17.0~9 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=43ffae60fc5b521b13899b573b2632c546628cd1;p=thirdparty%2Fsnort3.git Pull request #3155: doc: update builtin alerts description for dnp3 Merge in SNORT/snort3 from ~SBAIGAL/snort3:doc_dnp3 to master Squashed commit of the following: commit 961b0103065d94673d7c4ca38461996c51c6daa4 Author: Steven Baigal (sbaigal) Date: Mon Nov 8 17:20:24 2021 -0500 doc: update builtin alerts description for dnp3 --- diff --git a/doc/reference/builtin_stubs.txt b/doc/reference/builtin_stubs.txt index bc5c670cc..e6da01eee 100644 --- a/doc/reference/builtin_stubs.txt +++ b/doc/reference/builtin_stubs.txt @@ -1787,7 +1787,7 @@ Invalid word count for the command or structure size. SMB commands have specific 133:6 -Bad byte count for the command. Either word count is zero and byte count isn't or byte count is not in the range of mininum and maximum required byte count for the SMB command. +Bad byte count for the command. Either word count is zero and byte count isn't or byte count is not in the range of minimum and maximum required byte count for the SMB command. 133:7 @@ -2266,27 +2266,29 @@ Modbus using reserved function code 145:1 -(dnp3) DNP3 link-layer frame contains bad CRC +DNP3 link-layer frame contains bad CRC 145:2 -(dnp3) DNP3 link-layer frame was dropped +DNP3 link-layer frame is truncated or frame length is invalid 145:3 -(dnp3) DNP3 transport-layer segment was dropped during reassembly +DNP3 transport-layer segment sequence number is incorrect 145:4 -(dnp3) DNP3 reassembly buffer was cleared without reassembling a complete message +DNP3 transport-layer segment flag violation is detected, FIR flag was set in +middle fragment 145:5 -(dnp3) DNP3 link-layer frame uses a reserved address +DNP3 link-layer frame uses a reserved address (0xFFF0 to 0xFFFB) 145:6 -(dnp3) DNP3 application-layer fragment uses a reserved function code +DNP3 application-layer fragment uses an undefined function code, defined +function codes: Requests (0 to 33) and Responses (129 to 131) 148:1