how can i use SCADA preprocessor in So rules?

[Reza Daraee <reza.daraee () gmail com>]

Hi there

I have 2 question:
1.I want to use SCADA preprocessors such as Modbus in SO rules. for example
to get function code of a Modbus packet. is there any chance to do that or
any code to describe that?

2.Is there any preprocessor for S7 siemens protocol for snort? I googled
and didn't find anything.

Best regards
Adareza

------------------------------------------------------------------------------

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!