[Bro] Is there existing signatures for modbus and dnp3

[anthony kasza]

Here are the sigs for dnp3 <
https://github.com/bro/bro/blob/master/scripts/base/protocols/dnp3/dpd.sig>.

-AK
On Nov 3, 2015 2:04 PM, "Ren, Wenyu" <wren3 at illinois.edu> wrote:

> Dear all,
>
> I am wondering whether there is some existing signatures of Bro for Modbus
> and DNP3. I found something named quickdraw, which are signatures for
> Modbus and DNP3. But it is for Snort and Bro does not support signature for
> Snort anymore as far as I know. Does anyone know some similar signature
> available for Bro? Thanks a lot.
>
> Wenyu
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20151103/0dcc31de/attachment.html