|
The value of TimeStamp fields means that it was received between ¡®August 24, 2020 00:00:00¡¯ and ¡®August 24, 2020 00:00:01¡¯ (¡®2020-08-24 00:00:01 ¡®2020-08-24 00:00:00¡¯)
Zero-Day Attack Packet Detection System which is received ZAPDP searches zero-day attack packet in flow-based PCA using TimeStamp and rule full set that sid is '255¡¯.
In Detection Result, raw data matched with rule begins at the 42th byte and ends at the 43th byte.
After Zero-Day Attack Packet Detection System makes detection result into ZAPHP format, it sends ZAPHP to Packet Highlight System.
|