SURICATA TRAFFIC-ID: whatsapp

SID: 300000031Rev: 121 views
Sourceoisf/trafficid
CreatedApril 26, 2019
UpdatedApril 26, 2019
alert tls any any -> any any (msg:"SURICATA TRAFFIC-ID: whatsapp"; tls_sni; content:"whatsapp.com"; isdataat:!1,relative; flow:to_server,established; flowbits:set,traffic/id/whatsapp; flowbits:set,traffic/label/im; flowbits:set,traffic/label/file-transfer; noalert; sid:300000031; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!