OISF/suricata
1
0
Fork 0
mirror of https://github.com/OISF/suricata.git synced 2026-10-12 02:07:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

rules: add sip-events.rules

Browse Source 
Ticket #8524
This commit is contained in:
Giuseppe Longo
2026-06-11 14:36:03 +00:00
committed by Victor Julien
parent 695b4f4a3d
commit ae58cc6491
3 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/Makefile.am
+1
View File
@@ -25,6 +25,7 @@ pop3-events.rules \
quic-events.rules \
rfb-events.rules \
sctp-events.rules \
sip-events.rules \
smb-events.rules \
smtp-events.rules \
snmp-events.rules \
rules/README.md
+1
View File
@@ -41,4 +41,5 @@ signature IDs.
| Bittorent| 2243000 | 2243999 |
| MODBUS | 2250000 | 2250999 |
| DNP3 | 2270000 | 2270999 |
| SIP | 2280000 | 2280999 |
| HTTP2 | 2290000 | 2290999 |
rules/sip-events.rules
+5
View File
@@ -0,0 +1,5 @@
# SIP app layer event rules
#
# SID's fall in the 2280000-2280999 range.
#
alert sip any any -> any any (msg:"SURICATA SIP invalid data"; app-layer-event:sip.invalid_data; classtype:protocol-command-decode; sid:2280001; rev:1;)