Tag Info

Hot answers tagged

3

Script kiddies need holidays too. Seriously, how about the answer "coincidence"? If there are usually one or two per day, it´s not that hard to believe that some days have 0. Just random background noise in the internet. Or maybe there was a single person repeatedly trying to get into your net. In this case, things happen to people. Computer broke; ...


2

Whats the difference between IDS and NIDS? The concept of IDS can be divided to Two classes, this are Host IDS and Network IDS or HIDS and NIDS. IDS / \ HIDS NIDS Host IDS Network IDS Inspecting Host Inspecting Network For ...


1

I would guess that this is an automated attack which does not have too much intelligence built-in. A sign of an automated script would be other (possibly unrelated) attempts from the same IP.


1

Typically, each rule includes a reference to the problem. In your specific case, the rule directly states: reference:url,blogs.technet.com/b/mmpc/archive/2013/05/10/browser-extension-hijacks-facebook-profiles.aspx This line is directly in the rule itself and serves as the explanation. The rule exists to alert you to suspicious traffic. You need to ...


1

Not sure how helpful this is but have you tried <?php as your content rather. [Untested] I've only personally setup TCP DDoS blocks using snort+snortsam for uni project. Also check you have defined correct NIC in conf file. Hope someone can give you a more direct answer.



Only top voted, non community-wiki answers of a minimum length are eligible