Snort mailing list archives

Re: Rule Snort Ping Flood


From: Joel Esler <jesler () sourcefire com>
Date: Mon, 11 Mar 2013 11:44:19 -0400

On Mar 7, 2013, at 1:28 AM, <yayantritaryana () live com> wrote:

Hi all,

How to create snort rule to log ping flood from external network with 100 packet per second.

Please show me the script :-D


http://manual.snort.org/node19.html

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
------------------------------------------------------------------------------
Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester  
Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the  
endpoint security space. For insight on selecting the right partner to 
tackle endpoint security challenges, access the full report. 
http://p.sf.net/sfu/symantec-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: