conpot icon indicating copy to clipboard operation
conpot copied to clipboard

add modules to detect type of attack

Open jjjan opened this issue 6 years ago • 2 comments

Hello, we really need to know what kind of attack is capture by conpot as signatures. for example. "Modbus.TCP.Invalid.Packet.Length" Signatures.

jjjan avatar Mar 01 '18 06:03 jjjan

What format do you expect? $protocol.$transport.$msg ?

glaslos avatar Nov 23 '20 20:11 glaslos

yeah may be good

jjjan avatar Nov 27 '20 17:11 jjjan