Sagan unknown stable other

[RSA-DPM] Swap-Memory Memory status Red [Critical]

[RSA-DPM] Swap-Memory Memory status Red [Critical]

View Source

Detection Logic

alert any $HOME_NET any -> $EXTERNAL_NET any (msg: "[RSA-DPM] Swap-Memory Memory status Red [Critical]"; content: "RKMA_MONITORING_EVENT"; content: "Type
| 3a
| Swap-Memory"; content: "RED"; distance: 45; within: 25; threshold: type suppress, track by_src, count 2, seconds 300;  sid:5003941; rev:2;)

Field Validations

Loading…

Comments (0)

Loading comments...