[Bro-Dev] #880: Cannot do signature matching for ICMP payload

[Bro Tracker]

#880: Cannot do signature matching for ICMP payload
--------------------------+-----------------------------
 Reporter:  sheharbano.k  |       Type:  Feature Request
   Status:  new           |   Priority:  Normal
Milestone:  Bro2.2        |  Component:  Bro
  Version:  git/master    |   Keywords:
--------------------------+-----------------------------
 We cannot do signature-matching for ICMP payload. All the attacks launched
 by THC IPv6 tool (http://www.thc.org/thc-ipv6/) use ICMP payload for which
 a signature can be easily written.

-- 
Ticket URL: <http://tracker.bro-ids.org/bro/ticket/880>
Bro Tracker <http://tracker.bro-ids.org/bro>
Bro Issue Tracker