ids:snort:snort_rule_format
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| ids:snort:snort_rule_format [2021/07/26 08:43] – peter | ids:snort:snort_rule_format [2021/07/26 08:46] (current) – peter | ||
|---|---|---|---|
| Line 11: | Line 11: | ||
| * **alert**: | * **alert**: | ||
| * **log**: | * **log**: | ||
| + | * **pass**: | ||
| * Direction: | * Direction: | ||
| * **-> | * **-> | ||
| Line 26: | Line 27: | ||
| < | < | ||
| - | alert tcp any 21 -> 192.168.1.123 any (msg: "TCP Packet is Detected"; | + | alert tcp any any -> any any(msg: " |
| + | |||
| + | alert tcp any 21 -> 192.168.1.123 any (msg: "TCP Packet | ||
| + | |||
| + | log tcp !192.168.0/ | ||
| + | |||
| + | log tcp any any -> 192.168.1.0/ | ||
| </ | </ | ||
ids/snort/snort_rule_format.1627289002.txt.gz · Last modified: 2021/07/26 08:43 by peter