Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[SQUID] TCP_DENIED"; content: "TCP_DENIED"; default_proto: tcp; default_dst_port: $SQUID_PORT; classtype: suspicious-traffic; program: squid; sid: 5000043; rev:3;)Field Validations
Loading…
Comments (0)
Loading comments...