command to run modbus and dnp3 using snort

[MLPrajwalGowda]

hi,

how can i make modbus.pcap file , can u please suggest how to run modbus in snort

[DalePeterson]

You need a modbus master slave to create the pcap. There are some free ones out there. FYI .. Wireshark has Modbus dissectors that are quite good. You can write rules directly or use the Snort Modbus TCP preprocessor, see https://www.snort.org/faq/readme-modbus Best Regards, Dale Peterson CEO / Catalyst @digitalbond, dale-peterson.com Subscribe to my ICS Security: Friday News and Notes <https://friday.dale-peterson.com/signup> email Check out the S4 Videos on the S4 Events YouTube Channel <https://www.youtube.com/s4events>

…

On Wed, Aug 9, 2023 at 12:35 AM MLPrajwalGowda ***@***.***> wrote: hi, how can i make modbus.pcap file , can u please suggest how to run modbus in snort — Reply to this email directly, view it on GitHub <#3>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACIRI3UMWXCS4ITME56O6U3XUNRYDANCNFSM6AAAAAA3JZJ5FQ> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[PrajwalML]

thank you @DalePeterson