From c60c03766c937cecc4bee4b98c2e511b2057fd14 Mon Sep 17 00:00:00 2001
From: Vladimir Gavrilov <105977161+0xA50C1A1@users.noreply.github.com>
Date: Tue, 28 Nov 2023 20:03:00 +0300
Subject: Add Schneider Electric’s UMAS detection support (#2180)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Add Schneider Electric’s UMAS detection support

* Swap proto IDs in ndpi_set_detected_protocol

* Update unit test result
---
 doc/protocols.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'doc')

diff --git a/doc/protocols.rst b/doc/protocols.rst
index 11fc42534..1cbc7de81 100644
--- a/doc/protocols.rst
+++ b/doc/protocols.rst
@@ -271,3 +271,12 @@ References: `Protocol Specs: <https://assets.omron.eu/downloads/manual/en/v4/w42
 Ether-S-I/O is a proprietary protocol used by Saia-Burgess's PLCs.
 
 References: `Wireshark wiki: <https://wiki.wireshark.org/EtherSIO.md>`_.
+
+
+.. _Proto 364:
+
+`NDPI_PROTOCOL_UMAS`
+============================
+UMAS is a proprietary Schneider Electric protocol based on Modbus. It's used in Modicon M580 and Modicon M340 CPU-based PLCs.
+
+References: `Unofficial article: <https://ics-cert.kaspersky.com/publications/reports/2022/09/29/the-secrets-of-schneider-electrics-umas-protocol/>`_.
-- 
cgit v1.2.3