Snort mailing list archives

Re: Sfportscan rules


From: "Joel Esler \(jesler\) via Snort-sigs" <snort-sigs () lists snort org>
Date: Mon, 12 Jul 2021 13:59:41 +0000

There are no rules associated with sfportscan.  The detection logic for sfportscan is hardcoded.  You may, however, 
change the settings for it.

http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node17.html#SECTION00324000000000000000

On Jul 9, 2021, at 9:20 AM, Golla, Vijay [USA] via Snort-sigs <snort-sigs () lists snort org> wrote:

Hi all, 
 
I have been experimenting with the sfportscan module and have been looking for the specific rules implemented within 
this module. I would like to eventually edit and modify the rules used within the sfportscan module as I further 
experiment. I have searched the internet for the rules used as snort is open source but can not seem to locate the 
documentation. Any clarification or guidance would be much appreciated!
 
Thank you!
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org <mailto:Snort-sigs () lists snort org>
https://lists.snort.org/mailman/listinfo/snort-sigs <https://lists.snort.org/mailman/listinfo/snort-sigs>

Please visit http://blog.snort.org <http://blog.snort.org/> for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette 
<https://snort.org/faq/what-is-the-mailing-list-etiquette>

Visit the Snort.org <http://snort.org/> to subscribe to the official Snort ruleset, make sure to stay up to date to 
catch the most <a href=" https://snort.org/downloads/#rule-downloads 
<https://snort.org/downloads/#rule-downloads>">emerging threats</a>!

Attachment: smime.p7s
Description:

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!

Current thread: