modify rule 103

Montimage · Nov 22, 2023 · dcd8514 · dcd8514
1 parent fe0cd57
commit dcd8514
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/rules/103.corrupted_ngap.xml b/rules/103.corrupted_ngap.xml
@@ -14,7 +14,7 @@ Note:
  - the condition (ip.src != ip.dst) is used just to collect the IP addresses to show on MMT-Operator 
 -->
 
-<property value="THEN" delay_units="ms" delay_min="0" delay_max="0" property_id="103" type_property="ATTACK" 
+<property value="THEN" delay_units="ms" delay_min="0" delay_max="0" property_id="103" type_property="SECURITY" 
     description="SCTP Protocol Identifier indicates that its payload is NGAP but the payload is not effectually NGAP">
     <event value="COMPUTE" event_id="1" 
         description="SCTP Protocol Identifier is 60 to indicate its payload is NGAP"

diff --git a/rules/108.http2_payload_fuzzing.xml b/rules/108.http2_payload_fuzzing.xml
@@ -17,7 +17,7 @@ static bool em_check_fuzzing(int payload_length, const char* payload, double pac
 	//data=(char*)payload_data;
 	//printf("payload length %d \n",payload_length);
 	bool result=false;
-	for (int i = 9; i < payload_length + 9 ; i++) {
+	for (int i = 0; i < payload_length  ; i++) {
 		//printf("  %02hhX ",payload[i]);
 		//printf("  %c",payload[i]);
 		if((payload[i]=='\\')|| payload[i]=='#' || (payload[i]=='%') || (payload[i]=='$')){