Skip to main content

how to write a snort rule to alert traffic that does not find any matched rules

Snort in IDS mode:

If there is some traffic that does NOT find any matched rule against all existing Snort rules, how would you write a bottom rule to alert this traffic?

TJCLK
  • 848
  • 8
  • 25