<html>
<body>
Depends on what protocol the IoT device communicates on or the pattern of traffic in the packet. You knowing that info would help in writing a custom signature or use an existing signature that can match or detect.
<br>
<br>
<font color="#000000">> On Apr 12, 2018, at 1:49 PM, Rildo Souza <<a href="mailto:rildo.souza@rnp.br">rildo.souza@rnp.br</a>> wrote:
</font><br>
<font color="#000000">>
</font><br>
<font color="#000000">> Hello people,
</font><br>
<font color="#000000">>
</font><br>
<font color="#000000">> I would like to know if anybody has information how is possible to identify IoT devices at my network.
</font><br>
<font color="#000000">>
</font><br>
<font color="#000000">> Someone know any plugin or rule to identify ?
</font><br>
<font color="#000000">>
</font><br>
<font color="#000000">> Best Regards,
</font><br>
<font color="#000000">>
</font><br>
<font color="#000000">> Rildo Antonio de Souza
</font><br>
<font color="#000000">> Analista de Segurança
</font><br>
<font color="#000000">> Centro de Atendimento a Incidentes de Segurança - CAIS
</font><br>
<font color="#000000">> Rede Nacional de Ensino e Pesquisa - RNP
</font><br>
<font color="#000000">> (19) 3787-3368 - <a href="http://www.rnp.br/cais">http://www.rnp.br/cais</a>
</font><br>
<font color="#000000">> _______________________________________________
</font><br>
<font color="#000000">> Suricata IDS Users mailing list: <a href="mailto:oisf-users@openinfosecfoundation.org">oisf-users@openinfosecfoundation.org</a>
</font><br>
<font color="#000000">> Site: <a href="http://suricata-ids.org">http://suricata-ids.org</a> | Support: <a href="http://suricata-ids.org/support/">http://suricata-ids.org/support/</a>
</font><br>
<font color="#000000">> List: <a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a>
</font><br>
<font color="#000000">>
</font><br>
<font color="#000000">> Conference: <a href="https://suricon.net">https://suricon.net</a>
</font><br>
<font color="#000000">> Trainings: <a href="https://suricata-ids.org/training/">https://suricata-ids.org/training/</a>
</font><br>
<br>
<BR />
<BR />
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to which they
are addressed. If you have received this email in error please notify Netsecuris management at mgmt@netsecuris.com. Please note that any views or opinions presented in
this email are solely those of the author and do not necessarily
represent those of Netsecuris Inc. The integrity and
security of this message cannot be guaranteed on the Internet
<BR />
</body>
</html>