Re: DDoS Rule

["Joel Esler (jesler)" <jesler () cisco com>]

That's a large request.  I'd begin by taking a look at the existing Ruleset for "denial-of-service"

--
Joel Esler
Sent from my iPhone

On Feb 8, 2015, at 7:52 PM, Eugene Grama <eugene.grama () gmail com<mailto:eugene.grama () gmail com>> wrote:

Hello,

Good day everyone, hope that everyone is doing fine.

I'm a newbie in snort, and still in learning process.

Can I ask for your kind advice on how I can setup a rule that will detect DDoS.

--
Thank you very much and Best regards,

Eugene
------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net<mailto:Snort-sigs () lists sourceforge net>
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!