gen-db

Firestorm NIDS是一个性能非常高的网络入侵检测系统 (NIDS)。目前

# keys: generator sid message
decode.ip 1 Invalid IP header length
decode.ip 2 IP version != 4
decode.ip 3 IP datagram reported smaller than header
ipfrag 1 Teardrop
ipfrag 2 Oversized fragments
ipfrag 3 Fragmentation attack
ipfrag 4 Boink
ipfrag 5 Truncated fragment
ipfrag 6 Fragment in fragment
ipfrag 7 Too many fragments
ipfrag 8 Fragment arrived after timeout
tcpstream 1 In-window SYN
tcpstream 2 Data sent on closed stream
tcpstream 3 PAWS discard
tcp.icmperr 1 ICMP error from interloper
tcp.icmperr 2 ICMP error on established connection
sig.ip * IP signatures
sig.tcp * TCP signatures
sig.udp * UDP signatures
sig.icmp * ICMP signatures