[Prelude Hybrid IDS] #233: cisco-router.rule packet deny correction
"Prelude Hybrid IDS" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
#233: cisco-router.rule packet deny correction ---------------------------------+------------------------------------------ Reporter: [email protected] | Owner: yoann Type: enhancement | Status: new Priority: normal | Milestone: Prelude-LML 0.9.11 Component: prelude-lml | Version: 0.9 Severity: normal | Keywords: ---------------------------------+------------------------------------------ cisco router acl lists for some time now supports names instead of just numbers this made rule id=500 in cisco-router.rules fail to alert on packet denys on newer cisco devices. attached is a simple patch which makes the rule valid for the new cisco devices -- Ticket URL: <https://trac.prelude-ids.org/ticket/233> Prelude Hybrid IDS <http://www.prelude-ids.org> The Prelude Hybrid Intrusion Detection System suite _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel