diff options
| author | Renato Botelho <garga@FreeBSD.org> | 2014-09-06 10:28:55 -0300 |
|---|---|---|
| committer | Renato Botelho <garga@FreeBSD.org> | 2014-09-06 10:28:55 -0300 |
| commit | 81ff18ddc45fff6018e7e052c865aaa4f85cfe14 (patch) | |
| tree | 724108d95af058335d078040aca6ec6aeaeb1746 /config/suricata/modifysid-sample.conf | |
| parent | 200641d3d2e8dcaf66bb5c141def1b4ad109df3b (diff) | |
| parent | ad7e3dca2b915b9f27ba01bade962305a0dd34bb (diff) | |
| download | pfsense-packages-81ff18ddc45fff6018e7e052c865aaa4f85cfe14.tar.gz pfsense-packages-81ff18ddc45fff6018e7e052c865aaa4f85cfe14.tar.bz2 pfsense-packages-81ff18ddc45fff6018e7e052c865aaa4f85cfe14.zip | |
Merge pull request #696 from bmeeks8/suricata-2.0.3-v2.0
Diffstat (limited to 'config/suricata/modifysid-sample.conf')
| -rw-r--r-- | config/suricata/modifysid-sample.conf | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/config/suricata/modifysid-sample.conf b/config/suricata/modifysid-sample.conf new file mode 100644 index 00000000..d59f84ba --- /dev/null +++ b/config/suricata/modifysid-sample.conf @@ -0,0 +1,23 @@ +# example modifysid.conf +# +# formatting is simple +# <sid or sid list> "what I'm replacing" "what I'm replacing it with" +# +# Note that this will only work with GID:1 rules, simply because modifying +# GID:3 SO stub rules would not actually affect the rule. +# +# If you are attempting to change rulestate (enable,disable) from here +# then you are doing it wrong. Do this from within the respective +# rulestate modification configuration files. + +# the following applies to sid 10010 only and represents what would normally +# be s/to_client/from_server/ +# 10010 "to_client" "from_server" + +# the following would replace HTTP_PORTS with HTTPS_PORTS for ALL GID:1 +# rules +# "HTTP_PORTS" "HTTPS_PORTS" + +# multiple sids can be specified as noted below: +# 302,429,1821 "\$EXTERNAL_NET" "\$HOME_NET" + |