Re: Rule support on Audio Video Bridging (AVB) protocol or other low level protocols

Snort bloqueando Whatsapp.  Which ports to open???d

Em qui., 17 de ago. de 2023 às 10:27, Rostanin Gleb SBR DIRCS via
Snort-users <[email protected]> escreveu:

> Hey Snort team,
>
>
>
> is there any information on which additional protocols apart of the
> standard protocols are supported by snort 2 and 3? I am interested in
> analyzing the AVB Transportation protocol with SNORT, by, e.g., using the
> dataset of an IDS Automotive Ethernet Paper
> <https://ocslab.hksecurity.net/Datasets/automotive-ethernet-intrusion-dataset>.
> It works on the Ethernet frame layer and therefore it is not possible to
> make a standard snort rule (as I understand). The AVB protocol, concretely
> IEEE 1722 (AVTP) protocol, follows directly after Layer 2 and 802.1Q VLAN
> layer.
>
> Is there any possibility on analyzing the packets with Snort? My goal
> would be to detect injections to the AVTP used by a Video stream. Also is
> possible to detect MAC Flooding attacks with Snort, as Snort does not give
> the option on analyzing Layer 2?
>
>
>
> Sincerely
>
>
>
> Gleb Rostanin
>
>
> _______________________________________________
> Snort-users mailing list
> [email protected]
> Go to this URL to change user options or unsubscribe:
> https://lists.snort.org/mailman/listinfo/snort-users
>
>         To unsubscribe, send an email to:
>         [email protected]
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
> Please follow these rules:
> https://snort.org/faq/what-is-the-mailing-list-etiquette
>


-- 
att

Leandro Bisio
+55 62 99357-1319

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette