Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

Matching data between different packets

IDS/IPS

2 Posts 2 Posters 254 Views

V

volnodumcev
last edited by Jan 21, 2021, 12:46 PM

Please give me a hand with one task. I need to compare Timestamp field between Goose protocol packets to prevent a MITM attack. Can I solve it using Suricata rules?
B 1 Reply Last reply Jan 21, 2021, 4:33 PM
Reply Quote 0
B

bmeeks @volnodumcev
last edited by bmeeks Jan 21, 2021, 4:33 PM Jan 21, 2021, 4:33 PM

@volnodumcev said in Matching data between different packets:

Please give me a hand with one task. I need to compare Timestamp field between Goose protocol packets to prevent a MITM attack. Can I solve it using Suricata rules?

I do not believe that is possible with either Suricata or Snort rules syntax. But I confess to not being a rule writing guru. You might consider posting your question on the mailing lists for Suricata.

Here are the Suricata Mailing Lists: https://lists.openinfosecfoundation.org/mailman/listinfo.
1 Reply Last reply
Reply Quote 0

1 / 1