Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[NETSCREEN] ICMP fragment"; program: Netscreen; content: "ICMP fragment"; default_proto: tcp; classtype: suspicious-traffic; sid: 5000399; rev:2;)Field Validations
Loading…
Comments (0)
Loading comments...