Snort mailing list archives
Modifying DNP3 Content
From: Chamara Devanarayana via Snort-devel <snort-devel () lists snort org>
Date: Wed, 18 Sep 2019 21:00:46 +0000
Hi, I tried to use SNORT inline to modify DNP3 application data. Although SNORT modified the data it did not modify the CRC which is there after the first 8 bytes and then after each 16 bytes. Therefore, there was a CRC error at the DNP3 Master. I modified the sp_replace to handle this and it was working after that. Is it possible to contribute the changes that I made in the SNORT repo? If so what is the procedure for doing so? Thanks, Best regards, Chamara Devanarayana Simulation Specialist RTDS Technologies Inc.
_______________________________________________ Snort-devel mailing list Snort-devel () lists snort org https://lists.snort.org/mailman/listinfo/snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Modifying DNP3 Content Chamara Devanarayana via Snort-devel (Sep 18)
- <Possible follow-ups>
- Re: Modifying DNP3 Content Russ Combs (rucombs) via Snort-devel (Sep 18)
- Re: Modifying DNP3 Content Chamara Devanarayana via Snort-devel (Sep 19)