conpot
conpot copied to clipboard
add modules to detect type of attack
Hello, we really need to know what kind of attack is capture by conpot as signatures. for example. "Modbus.TCP.Invalid.Packet.Length" Signatures.
What format do you expect? $protocol.$transport.$msg
?
yeah may be good