Table of Contents

PFSense - Suricata - Alerts - SURICATA Applayer Mismatch protocol both directions

Server and client directions have different protocols.

For example a client talking HTTP to an SSH server.


Suppress

#SURICATA Applayer Mismatch protocol both directions
suppress gen_id 1, sig_id 2260000

References

https://suricata.readthedocs.io/en/latest/rules/app-layer.html