CIP Inspector Overview
Type |
Inspector (service) |
Usage |
Inspect |
Instance Type |
Multiton |
Other Inspectors Required |
|
Enabled |
|
The Common Industrial Protocol (CIP) is an application protocol that supports industrial automation applications. EtherNet/IP (ENIP) is an implementation of CIP that is used on Ethernet-based networks.
The cip
inspector detects CIP and ENIP traffic running on TCP or UDP and
sends it to the intrusion rules engine. You can use CIP and ENIP keywords in custom
intrusion rules to detect attacks in CIP and ENIP traffic.
![]() Note |
In Snort 3, the |