Lets say malformed packets are sent by attacker with improper TCP options length i.e, 50bytes,222bytes etc.

Is there any way to monitor these packets having invalid tcp options set using Snort or Suricata ?

Do we have any tag that can look in tcp header (check for particular offset etc)?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.