summaryrefslogtreecommitdiffstats
path: root/rules/dhcp-events.rules
blob: c99d9816e80b08abcc1963baa777e661fe7be8d1 (plain)
1
2
3
4
5
6
7
# DHCP app-layer event rules.  See
#
# https://redmine.openinfosecfoundation.org/projects/suricata/wiki/AppLayer
# for SID allocation.

alert dhcp any any -> any any (msg:"SURICATA DHCP malformed options"; app-layer-event:dhcp.malformed_options; classtype:protocol-command-decode; sid:2227000; rev:1;)
alert dhcp any any -> any any (msg:"SURICATA DHCP truncated options"; app-layer-event:dhcp.truncated_options; classtype:protocol-command-decode; sid:2227001; rev:1;)