mirror of
https://github.com/Oxbian/SIDPS.git
synced 2025-07-07 12:24:38 +02:00
9 lines
316 B
Python
9 lines
316 B
Python
# Seuils
|
|
TIME_WINDOW = 180
|
|
NB_SEUIL = 5
|
|
|
|
|
|
def rule(packet, tcp_packets):
|
|
if (tcp_packets.count_packet_of_type("RA", TIME_WINDOW) + tcp_packets.count_packet_of_type("SA", TIME_WINDOW)) + tcp_packets.count_packet_of_type("R", TIME_WINDOW) >= NB_SEUIL:
|
|
print(f"Alerte, seuil dépassés, risque de SynScan")
|