Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[NETSCREEN] Fragmented traffic"; program: Netscreen; content: "Fragmented traffic"; default_proto: tcp; classtype: suspicious-traffic; sid: 5000396; rev:2;)Field Validations
Loading…
Comments (0)
Loading comments...