Re: Trying to learn to read Snort rules

["lists () packetmail net" <lists () packetmail net>]

On 07/28/15 08:58, Justin Merhoff wrote:
> To whom it may concern,
>
> I am in a SANS.org 501 class and I am trying to better understand Snort rules.
> Can any one direct me to where I can fine some rules I can read to test my
> skills at reading the rules? I would really appreciate the help.

Snort:

https://www.snort.org/downloads/community/community-rules.tar.gz
https://www.snort.org/downloads/#rule-downloads <-- You need to register

Emerging-Threats:

https://rules.emergingthreats.net/open/snort-2.9.0/

All the best,
Nathan Fowler

------------------------------------------------------------------------------
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!