Sagan medium stable other

[SQUID] TCP_DENIED invalid-request

[SQUID] TCP_DENIED invalid-request

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[SQUID] TCP_DENIED invalid-request"; content: "TCP_DENIED"; content: "invalid-request"; default_proto: tcp; default_dst_port: $SQUID_PORT; classtype: suspicious-traffic; program: squid; sid: 5000045; rev:3;)

Field Validations

Loading…

Comments (0)

Loading comments...