From 18e84ca2c81bb29acee746c3e775f3572bb33d44 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sun, 5 Mar 2017 16:41:52 +0100
Subject: [PATCH] required_value for protocol added

---
 objects/ddos/definition.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/objects/ddos/definition.json b/objects/ddos/definition.json
index 55c7f7e..78b014a 100644
--- a/objects/ddos/definition.json
+++ b/objects/ddos/definition.json
@@ -38,7 +38,8 @@
     },
     "protocol": {
       "misp-attribute": "text",
-      "misp-usage-frequency": 0
+      "misp-usage-frequency": 0,
+      "required_value": ["TCP", "UDP", "ICMP", "IP"]
     },
     "first-seen": {
       "misp-attribute": "datetime",