Hot answers tagged ids
Script kiddies need holidays too. Seriously, how about the answer "coincidence"? If there are usually one or two per day, it´s not that hard to believe that some days have 0. Just random background noise in the internet. Or maybe there was a single person repeatedly trying to get into your net. In this case, things happen to people. Computer broke; ...
Whats the difference between IDS and NIDS? The concept of IDS can be divided to Two classes, this are Host IDS and Network IDS or HIDS and NIDS. IDS / \ HIDS NIDS Host IDS Network IDS Inspecting Host Inspecting Network For ...
I would guess that this is an automated attack which does not have too much intelligence built-in. A sign of an automated script would be other (possibly unrelated) attempts from the same IP.
Typically, each rule includes a reference to the problem. In your specific case, the rule directly states: reference:url,blogs.technet.com/b/mmpc/archive/2013/05/10/browser-extension-hijacks-facebook-profiles.aspx This line is directly in the rule itself and serves as the explanation. The rule exists to alert you to suspicious traffic. You need to ...
Not sure how helpful this is but have you tried <?php as your content rather. [Untested] I've only personally setup TCP DDoS blocks using snort+snortsam for uni project. Also check you have defined correct NIC in conf file. Hope someone can give you a more direct answer.
Only top voted, non community-wiki answers of a minimum length are eligible