I hereby claim:
- I am jasonish on github.
- I am ish (https://keybase.io/ish) on keybase.
- I have a public key whose fingerprint is 13F1 B6CB 851D 0565 8C27 9D3D 97F0 4794 1370 36B3
To claim this, I am signing this object:
#! /bin/sh | |
# | |
# Script to backup git repositories. | |
# | |
# For each subdirectory ending in .git: | |
# - perform a git fetch from origin. | |
# - perform a git push --all to all remotes other than origin. | |
repos=`find * -type d -name \*.git` |
<!-- | |
Extract JSP tag libs. This is so JSPs can find the taglibs when we | |
are using embedded Jetty, which seems to have trouble finding them. So put | |
them into our own jars classpath and it seems to work. The other option is | |
to shade the jar using the maven shade plugin. | |
--> | |
<plugin> | |
<groupId>org.apache.maven.plugins</groupId> | |
<artifactId>maven-dependency-plugin</artifactId> | |
<executions> |
vars: | |
address-groups: | |
HOME_NET: &HOME_NET | |
- 192.168.0.0/16 | |
- 10.0.0.0/8 | |
- 172.16.0.0/12 | |
- not: | |
- 10.1.1.1/32 | |
EXTERNAL_NET: | |
- not: *HOME_NET |
I hereby claim:
To claim this, I am signing this object:
package rulemanager; | |
import org.eclipse.jgit.api.Git; | |
import org.eclipse.jgit.api.errors.GitAPIException; | |
import org.eclipse.jgit.lib.Ref; | |
import org.eclipse.jgit.lib.Repository; | |
import org.eclipse.jgit.revwalk.RevCommit; | |
import org.eclipse.jgit.revwalk.RevTree; | |
import org.eclipse.jgit.revwalk.RevWalk; | |
import org.eclipse.jgit.storage.file.FileRepositoryBuilder; |
/var/log/suricata/*.log /var/log/suricata/*.json | |
{ | |
rotate 3 | |
daily | |
missingok | |
nocompress | |
sharedscripts | |
postrotate | |
/bin/kill -HUP `cat /var/run/suricata-internal.pid` || true | |
endscript |
# 1 - Function code match - either direction. | |
alert dnp3 any any -> any any ( \ | |
msg:"DNP3 Sample function code match"; \ | |
dnp3_func:21; \ | |
sid:1; rev:1;) | |
# 2 - Internal indicators. Applies to client only. | |
# - Providing multiple flags in one dnp3_ind option will match if any | |
# of the flags are set. Use dnp3_ind multiple times to alert on a specific | |
# combination of flags. |
"dnp3": { | |
// This is actually 16 bits of flags. Should the flags be broken out into a list of symbolic names? | |
// | |
// Examples: | |
// - List flags that are set. | |
// "iin": ["device_restart", "class_3_events"] | |
// - List state of all flags: | |
// "iin": { | |
// "device_restart": true, |
{ | |
"dnp3": { | |
"iin": { | |
"indicators": [ | |
"device_restart", | |
"class_2_events", | |
"class_1_events" | |
], | |
"value": 34304 | |
}, |
{ | |
"dnp3": { | |
"application": { | |
"objects": [ | |
{ | |
"variation": 0, | |
"group": 1 | |
} | |
], | |
"function_code": 1, |