Re: Modifying DNP3 Content

"Russ Combs \(rucombs\) via Snort-devel" <[email protected]> Thu, 19 Sep 2019 05:06:18 +0000
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <[email protected]>
--===============4185396169923347431==
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_"

--_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

SGV5IENoYW1hcmEsDQoNCllvdSB3aWxsIGhhdmUgYmV0dGVyIGx1Y2sgd2l0aCBTbm9ydCAzLiAg
WW91IGNhbiBvcGVuIGEgcHVsbCByZXF1ZXN0IGF0IGh0dHBzOi8vZ2l0aHViLmNvbS9zbm9ydDMv
c25vcnQzLmdpdC4NCg0KVGhpcyBpcyBhIG5vbi10cml2aWFsIGNoYW5nZSB0byBkbyBpbi5hIGdl
bmVyaWMgd2F5IGFuZCBpdCB3b3VsZCBiZSBsb3cgcHJpb3JpdHkgYnV0IHdlIHdpbGwgdGFrZSBh
IGxvb2sgYW5kIGdldCBiYWNrIHRvIHlvdS4NCg0KVGhhbmtzDQpSdXNzDQoNCkZyb206IFNub3J0
LWRldmVsIDxzbm9ydC1kZXZlbC1ib3VuY2VzQGxpc3RzLnNub3J0Lm9yZz4gb24gYmVoYWxmIG9m
IENoYW1hcmEgRGV2YW5hcmF5YW5hIHZpYSBTbm9ydC1kZXZlbCA8c25vcnQtZGV2ZWxAbGlzdHMu
c25vcnQub3JnPg0KUmVwbHktVG86IENoYW1hcmEgRGV2YW5hcmF5YW5hIDxDaGFtYXJhQHJ0ZHMu
Y29tPg0KRGF0ZTogV2VkbmVzZGF5LCBTZXB0ZW1iZXIgMTgsIDIwMTkgYXQgNTowMiBQTQ0KVG86
ICJzbm9ydC1kZXZlbEBsaXN0cy5zbm9ydC5vcmciIDxzbm9ydC1kZXZlbEBsaXN0cy5zbm9ydC5v
cmc+DQpTdWJqZWN0OiBbU25vcnQtZGV2ZWxdIE1vZGlmeWluZyBETlAzIENvbnRlbnQNCg0KSGks
DQpJIHRyaWVkIHRvIHVzZSBTTk9SVCBpbmxpbmUgdG8gbW9kaWZ5IEROUDMgYXBwbGljYXRpb24g
ZGF0YS4gQWx0aG91Z2ggU05PUlQgbW9kaWZpZWQgdGhlIGRhdGEgaXQgZGlkIG5vdCBtb2RpZnkg
dGhlIENSQyB3aGljaCBpcyB0aGVyZSBhZnRlciB0aGUgZmlyc3QgOCBieXRlcyBhbmQgdGhlbiBh
ZnRlciBlYWNoIDE2IGJ5dGVzLiBUaGVyZWZvcmUsIHRoZXJlIHdhcyBhIENSQyBlcnJvciBhdCB0
aGUgRE5QMyBNYXN0ZXIuIEkgbW9kaWZpZWQgdGhlIHNwX3JlcGxhY2UgdG8gaGFuZGxlIHRoaXMg
YW5kIGl0IHdhcyB3b3JraW5nIGFmdGVyIHRoYXQuIElzIGl0IHBvc3NpYmxlIHRvIGNvbnRyaWJ1
dGUgdGhlIGNoYW5nZXMgdGhhdCBJIG1hZGUgaW4gdGhlIFNOT1JUIHJlcG8/IElmIHNvIHdoYXQg
aXMgdGhlIHByb2NlZHVyZSBmb3IgZG9pbmcgc28/DQpUaGFua3MsDQpCZXN0IHJlZ2FyZHMsDQpD
aGFtYXJhIERldmFuYXJheWFuYQ0KU2ltdWxhdGlvbiBTcGVjaWFsaXN0DQpSVERTIFRlY2hub2xv
Z2llcyBJbmMuDQoNCg==

--_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <[email protected]>
Content-Transfer-Encoding: base64
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--_000_B4E2C928151548BAA280403B1AA5CC89ciscocom_--

--===============4185396169923347431==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============4185396169923347431==--