Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options questions only not deleted user 36899

Snort is an open source network intrusion detection and prevention system (NIDS/NIPS).

0 votes
1 answer
583 views

snort rule to detect relay attempt not working

The snort rule to detect a relay attempt which I tried using is: alert tcp $SMTP_SERVERS 25 -> any any (msg: "Possible relay attempt"; flow:to_client; content:"Relay access denied"; sid:1000007;) …
synthesis's user avatar
  • 155
5 votes
4 answers
2k views

Benefit of using two network interfaces for intrusion detection system

What is the benefit of using two network interfaces (management interface and sniffing interface) for an IDS such as Snort? … I have used a Snort IDS where it only used one network interface for both management and sniffing and it seemed to work fine with regards to logging alerts on certain traffic. …
synthesis's user avatar
  • 155