Snort mailing list archives
Re: where can I find info about rules?
From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 27 Apr 2004 17:46:42 -0400
At 03:27 PM 4/27/2004, Marcin Laskowski wrote:
Hi, I want to configure Snort to work properly in my network and the question is where can I find info about rules? I need information such as what do they do and where they should be used.
Go to http://www.snort.org/.Look in the lower left corner for a box labeled "rules documentation".. it's a search on a database of rule documentation.
Or you can go straight to: http://www.snort.org/cgi-bin/sigs-search.cgiand enter more advanced queries so you don't get such blanket results. (the search from the main page will match the search string anywhere, but the other page you can specify to explicitly search by SID, CVE or description.
------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10gGet certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- where can I find info about rules? Marcin Laskowski (Apr 27)
- Re: where can I find info about rules? Matt Kettler (Apr 27)