Creating SNORT Rules

Описание

Summary

Several examples of Snort rule creation and triggered alerts.

4:22 - Adding custom rules to Snort configuration
4:47 - Create custom rules file
5:40 - FTP alert rule
14:57 - Manually running Snort
17:53 - FTP alert generated
19:12 - Keyword alert rule
25:24 - Keyword alert generated
26:28 - ICMP alert rule
28:56 - ICMP alert generated
36:28 - Processing a tcpdump file with Snort


Reference Materials

http://www.snort.org/docs - Snort Documentation
http://oreilly.com/pub/h/1393