Sagan informational stable other

[ARP] arpwatch - Bogus IP address detected

[ARP] arpwatch - Bogus IP address detected

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[ARP] arpwatch - Bogus IP address detected"; content: " bogon "; classtype: network-event; program: arpwatch; sid: 5001063; rev:3; metadata: mitre_technique_id T1046, mitre_technique_id T1048;)

Field Validations

Loading…

Comments (0)

Loading comments...