Tag Info

New answers tagged

0

If you want something that provides advice targeted to your specific needs and environment, then a free Snort or Suricata install without a support contract from an established vendor or good consultant is probably not the best solution for your desires, though it may fit your budget. In general, start off with the default SNORT rulesets you use - the ...


1

Typically, each rule includes a reference to the problem. In your specific case, the rule directly states: reference:url,blogs.technet.com/b/mmpc/archive/2013/05/10/browser-extension-hijacks-facebook-profiles.aspx This line is directly in the rule itself and serves as the explanation. The rule exists to alert you to suspicious traffic. You need to ...


1

Not sure how helpful this is but have you tried <?php as your content rather. [Untested] I've only personally setup TCP DDoS blocks using snort+snortsam for uni project. Also check you have defined correct NIC in conf file. Hope someone can give you a more direct answer.



Top 50 recent answers are included