Please enable JavaScript.

Coggle requires JavaScript to display documents.

suricata (Man (-V, -c <path>, -T, -v, -r <path>, --pcap-file…

- - - - Pass
      - Drop
      - Reject
      - Alert
    - - Ports
        
        : port range
        
        ! not
        
        [...,...] grouping
      - Direction
        
        ->
        
        <>
      - Source and destination
      - Protocol
        
        udp
        
        icmp
        
        ip
        
        http
        
        ftp
        
        tls
        
        tcp
        
        smb
        
        dns
        
        dcerpc
        
        ssh
        
        smtp
        
        imap
        
        msn
        
        modbus
        
        dnp3
        
        enip
        
        nfs
        
        ntp
    - - Modifier Keywords
      - Normalized Buffers
  - - - ICMP
      - TCP
      - UDP
      - GRE
      - ESP
      - AH
      - IPv6-ICMP
  - - - Suricata’s modifiers
  - - - fast_pattern:’chop’
      - prefilter
      - fast_pattern:only
- - - - RUNMODE_UNKNOWN = 0, RUNMODE_PCAP_DEV, RUNMODE_PCAP_FILE, RUNMODE_PFRING, RUNMODE_NFQ, RUNMODE_NFLOG, RUNMODE_IPFW, RUNMODE_ERF_FILE, RUNMODE_DAG, RUNMODE_AFP_DEV, RUNMODE_NETMAP, RUNMODE_TILERA_MPIPE, RUNMODE_UNITTEST, RUNMODE_NAPATECH, RUNMODE_UNIX_SOCKET, RUNMODE_USER_MAX, /* Last standard running mode */ RUNMODE_LIST_KEYWORDS, RUNMODE_LIST_APP_LAYERS, RUNMODE_LIST_CUDA_CARDS, RUNMODE_LIST_RUNMODES, RUNMODE_PRINT_VERSION, RUNMODE_PRINT_BUILDINFO, RUNMODE_PRINT_USAGE, RUNMODE_DUMP_CONFIG, RUNMODE_CONF_TEST, RUNMODE_LIST_UNITTEST, RUNMODE_ENGINE_ANALYSIS,
- - - - gen_id
      - sig_id
      - track
      - count
      - seconds
      - new_action
      - timeout