Re: how to test snort rules?

["phillip () bailey st" <phillip () bailey st>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/08/2011 10:29 AM, anvin igcar wrote:
> Dear members
>   I am new in snort and I installed it on my Fedora 12 system. SNORT is
> running properly and I am using BASE to view snort alerts. I want to know
> how to test snort rules , I want to test my running snort before deploying
> it.
> Is there any software which would do this?
>
> Thanks


give a try with http://nmap.org and http://www.metasploit.com


Phillip.

- -- 
www.bailey.st
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJNURRzAAoJENNBJKHbaDgTLeYH/24IVSCLYWuopztbpRCldohq
6FI1wETMttsnj6K4Buf/evlMdnEKAthO/c4QuNJZyWDgKyvpw2ZKChBhHGF5i1W+
GF+bDZzUtcLbjcNw8uGGtrDKveOVJA17qox0w8C6Wc/iC9vHd8s8mrSJR6RR5SQq
JCXt04ndH5Fty6/wzuQv88zJGhr5qLD6hAYrXj4yXtMGuAG1cHGTMgSDXEQcpY2i
5C8lgNI3QFjGoe4IE+QGRVvLBaaPjq2l99MrF9/q8VBOpwDP64/mofOb/i/F0dpa
aXYDAeg8rD9cBdyf8upZHWSl4e8sFKn/exfYIg8buKliFMxCb6GVZdkcM+y4biQ=
=0HH7
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users