Files
suricata/rules/sip-events.rules
2026-06-11 14:36:03 +00:00

6 lines
228 B
Plaintext

# SIP app layer event rules
#
# SID's fall in the 2280000-2280999 range.
#
alert sip any any -> any any (msg:"SURICATA SIP invalid data"; app-layer-event:sip.invalid_data; classtype:protocol-command-decode; sid:2280001; rev:1;)