Merge pull request #15 from Fortiphyd/develop

fix router issue and add arpsoof

Author: djformby

attacker/Dockerfile

@@ -17,7 +17,7 @@ RUN apt-get update && \
       x11vnc xvfb xauth x11-utils \
       wget git nano python3 python3-pip python3-websockify \
       ca-certificates supervisor sudo \
-      net-tools procps pulseaudio-utils \
+      net-tools procps pulseaudio-utils dsniff \
     && apt-get clean && rm -rf /var/lib/apt/lists/*
 
 

router/suricata.yaml

@@ -954,7 +954,7 @@ app-layer:
       # If the limit is reached, the app-layer-event:modbus.flooded; will match.
       #request-flood: 500
 
-      enabled: no
+      enabled: yes
       detection-ports:
         dp: 502
       # According to MODBUS Messaging on TCP/IP Implementation Guide V1.0b, it
@@ -968,7 +968,7 @@ app-layer:
 
     # DNP3
     dnp3:
-      enabled: no
+      enabled: yes
       detection-ports:
         dp: 20000