[Snort-sigs] how can i use SCADA preprocessor in So rules?

Reza Daraee tarahiweb2002 at ...144...
Sat Oct 17 13:28:27 EDT 2015

Hi there

I have 2 question:
1.I want to use SCADA preprocessors such as Modbus in SO rules. for example to get function code of a Modbus packet. is there any chance to do that or any code to describe that?

2.Is there any preprocessor for S7 siemens protocol for snort? I googled and didn't find anything.

Best regards

More information about the Snort-sigs mailing list