Router PCAP Capture File Uploaded via FTP to External Host
Detects FTP STOR commands associated with the transfer of files with a .pcap extension, which may indicate the exfiltration of captured network traffic from a network device or server.
Suricata

