Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with snort
Search options questions only
not deleted
user 9778
Snort is an open source network intrusion detection and prevention system (NIDS/NIPS).
5
votes
1
answer
4k
views
Bench marking Snort and other IDS/IPS
I am looking for facts and figures of research or surveys done which have bench-marked Snort with other IDS/IPS on various parameters like overall performance, accuracy, speed, documentation, scalability …
- 1,808
2
votes
2
answers
3k
views
Vulnerability scanner tools to use with Snort
So basically i will be writing rules for Snort for our specific needs. … for Snort for those vulnerabilities. …
- 1,808
4
votes
2
answers
267
views
Taking action for exploit attempts
Just recently I see I have had about 40 hits in one second for the following Snort rule- signature id 1:16008, which corresponds to the CVE-2007-6239: "... allows remote attackers to cause a denial of … (well I just run Snort in IDS mode, so I cant actually take any action, but wanted to know this to have more understanding of this) Or should Admins usually wait to see repeated hits before deciding that …
- 1,808
9
votes
1
answer
3k
views
How can an admin choose which Snort rules to enable?
The purpose is to configure Snort as an IDS to monitor network activity, and alert against the standard set of things an IDS should alert against--> buffer overflow attacks, injection
attacks, port scans … How is a network admin suppose to decide that what Snort rules he should enable for his network?
How does one shortlist on the .rules files to be used and the rules (in them) to be enabled? …
- 1,808