User Tools

Site Tools


ids:snort:snort_rule_format

This is an old revision of the document!


IDS - Snort - Snort Rule Format

Snort Rule Header

ActionProtocolSource AddressSource PortDirectionDestination AddressDestination Port

Sample Rule

alert tcp any 21 -> 192.168.1.123 any (msg: "TCP Packet is Detected";sid:100010)

NOTE: This is comprised of the:

  • Rule Header:
  • Rule Option:
ids/snort/snort_rule_format.1627288854.txt.gz · Last modified: 2021/07/26 08:40 by peter

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki