Re: Modifying DNP3 Content
"Russ Combs \(rucombs\) via Snort-devel" <[email protected]> Thu, 19 Sep 2019 05:06:18 +0000
| Newsgroups | gmane.comp.security.ids.snort.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============4185396169923347431== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_" --_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGV5IENoYW1hcmEsDQoNCllvdSB3aWxsIGhhdmUgYmV0dGVyIGx1Y2sgd2l0aCBTbm9ydCAzLiAg WW91IGNhbiBvcGVuIGEgcHVsbCByZXF1ZXN0IGF0IGh0dHBzOi8vZ2l0aHViLmNvbS9zbm9ydDMv c25vcnQzLmdpdC4NCg0KVGhpcyBpcyBhIG5vbi10cml2aWFsIGNoYW5nZSB0byBkbyBpbi5hIGdl bmVyaWMgd2F5IGFuZCBpdCB3b3VsZCBiZSBsb3cgcHJpb3JpdHkgYnV0IHdlIHdpbGwgdGFrZSBh IGxvb2sgYW5kIGdldCBiYWNrIHRvIHlvdS4NCg0KVGhhbmtzDQpSdXNzDQoNCkZyb206IFNub3J0 LWRldmVsIDxzbm9ydC1kZXZlbC1ib3VuY2VzQGxpc3RzLnNub3J0Lm9yZz4gb24gYmVoYWxmIG9m IENoYW1hcmEgRGV2YW5hcmF5YW5hIHZpYSBTbm9ydC1kZXZlbCA8c25vcnQtZGV2ZWxAbGlzdHMu c25vcnQub3JnPg0KUmVwbHktVG86IENoYW1hcmEgRGV2YW5hcmF5YW5hIDxDaGFtYXJhQHJ0ZHMu Y29tPg0KRGF0ZTogV2VkbmVzZGF5LCBTZXB0ZW1iZXIgMTgsIDIwMTkgYXQgNTowMiBQTQ0KVG86 ICJzbm9ydC1kZXZlbEBsaXN0cy5zbm9ydC5vcmciIDxzbm9ydC1kZXZlbEBsaXN0cy5zbm9ydC5v cmc+DQpTdWJqZWN0OiBbU25vcnQtZGV2ZWxdIE1vZGlmeWluZyBETlAzIENvbnRlbnQNCg0KSGks DQpJIHRyaWVkIHRvIHVzZSBTTk9SVCBpbmxpbmUgdG8gbW9kaWZ5IEROUDMgYXBwbGljYXRpb24g ZGF0YS4gQWx0aG91Z2ggU05PUlQgbW9kaWZpZWQgdGhlIGRhdGEgaXQgZGlkIG5vdCBtb2RpZnkg dGhlIENSQyB3aGljaCBpcyB0aGVyZSBhZnRlciB0aGUgZmlyc3QgOCBieXRlcyBhbmQgdGhlbiBh ZnRlciBlYWNoIDE2IGJ5dGVzLiBUaGVyZWZvcmUsIHRoZXJlIHdhcyBhIENSQyBlcnJvciBhdCB0 aGUgRE5QMyBNYXN0ZXIuIEkgbW9kaWZpZWQgdGhlIHNwX3JlcGxhY2UgdG8gaGFuZGxlIHRoaXMg YW5kIGl0IHdhcyB3b3JraW5nIGFmdGVyIHRoYXQuIElzIGl0IHBvc3NpYmxlIHRvIGNvbnRyaWJ1 dGUgdGhlIGNoYW5nZXMgdGhhdCBJIG1hZGUgaW4gdGhlIFNOT1JUIHJlcG8/IElmIHNvIHdoYXQg aXMgdGhlIHByb2NlZHVyZSBmb3IgZG9pbmcgc28/DQpUaGFua3MsDQpCZXN0IHJlZ2FyZHMsDQpD aGFtYXJhIERldmFuYXJheWFuYQ0KU2ltdWxhdGlvbiBTcGVjaWFsaXN0DQpSVERTIFRlY2hub2xv Z2llcyBJbmMuDQoNCg== --_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <[email protected]> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1u YW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNw YW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4g MS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZs aW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5IZXkgQ2hhbWFyYSw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+WW91IHdpbGwgaGF2 ZSBiZXR0ZXIgbHVjayB3aXRoIFNub3J0IDMuJm5ic3A7IFlvdSBjYW4gb3BlbiBhIHB1bGwgcmVx dWVzdCBhdA0KPGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL3Nub3J0My9zbm9ydDMuZ2l0Ij5o dHRwczovL2dpdGh1Yi5jb20vc25vcnQzL3Nub3J0My5naXQ8L2E+LjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5UaGlzIGlzIGEgbm9uLXRyaXZpYWwgY2hhbmdlIHRvIGRvIGluLmEgZ2VuZXJpYyB3 YXkgYW5kIGl0IHdvdWxkIGJlIGxvdyBwcmlvcml0eSBidXQgd2Ugd2lsbCB0YWtlIGEgbG9vayBh bmQgZ2V0IGJhY2sgdG8geW91LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3M8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJ1c3M8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBp biAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Y29sb3I6YmxhY2siPlNub3J0LWRldmVsICZsdDtzbm9ydC1kZXZlbC1ib3VuY2Vz QGxpc3RzLnNub3J0Lm9yZyZndDsgb24gYmVoYWxmIG9mIENoYW1hcmEgRGV2YW5hcmF5YW5hIHZp YSBTbm9ydC1kZXZlbCAmbHQ7c25vcnQtZGV2ZWxAbGlzdHMuc25vcnQub3JnJmd0Ozxicj4NCjxi PlJlcGx5LVRvOiA8L2I+Q2hhbWFyYSBEZXZhbmFyYXlhbmEgJmx0O0NoYW1hcmFAcnRkcy5jb20m Z3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgU2VwdGVtYmVyIDE4LCAyMDE5IGF0IDU6 MDIgUE08YnI+DQo8Yj5UbzogPC9iPiZxdW90O3Nub3J0LWRldmVsQGxpc3RzLnNub3J0Lm9yZyZx dW90OyAmbHQ7c25vcnQtZGV2ZWxAbGlzdHMuc25vcnQub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6 IDwvYj5bU25vcnQtZGV2ZWxdIE1vZGlmeWluZyBETlAzIENvbnRlbnQ8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGksPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHRyaWVkIHRvIHVzZSBTTk9SVCBpbmxpbmUgdG8gbW9k aWZ5IEROUDMgYXBwbGljYXRpb24gZGF0YS4gQWx0aG91Z2ggU05PUlQgbW9kaWZpZWQgdGhlIGRh dGEgaXQgZGlkIG5vdCBtb2RpZnkgdGhlIENSQyB3aGljaCBpcyB0aGVyZSBhZnRlciB0aGUgZmly c3QgOCBieXRlcyBhbmQgdGhlbiBhZnRlciBlYWNoIDE2IGJ5dGVzLiBUaGVyZWZvcmUsIHRoZXJl IHdhcyBhIENSQyBlcnJvciBhdCB0aGUgRE5QMyBNYXN0ZXIuDQogSSBtb2RpZmllZCB0aGUgc3Bf cmVwbGFjZSB0byBoYW5kbGUgdGhpcyBhbmQgaXQgd2FzIHdvcmtpbmcgYWZ0ZXIgdGhhdC4gSXMg aXQgcG9zc2libGUgdG8gY29udHJpYnV0ZSB0aGUgY2hhbmdlcyB0aGF0IEkgbWFkZSBpbiB0aGUg U05PUlQgcmVwbz8gSWYgc28gd2hhdCBpcyB0aGUgcHJvY2VkdXJlIGZvciBkb2luZyBzbz88bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJlc3QgcmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1D QSI+Q2hhbWFyYSBEZXZhbmFyYXlhbmE8L3NwYW4+PC9iPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUNBIj5T aW11bGF0aW9uIFNwZWNpYWxpc3Q8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tQ0EiPlJURFMgVGVj aG5vbG9naWVzIEluYy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_-- --===============4185396169923347431== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-devel mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort! --===============4185396169923347431==--