[Snort-users] Snort rules

andy lowton andy at ...586...
Fri Nov 10 06:52:16 EST 2000


>>>>> On Fri, 10 Nov 2000, "Pieter" == Pieter Blaauw wrote

  Pieter> My only problem is that
  Pieter> I'd like to get hold of a well defined ruleset to examine and draw up
  Pieter> a custom one from there.

  Pieter> The snort page gives some examples, but I feel if I had to setup a
  Pieter> ruleset I would miss some things due to inexperience.

Pieter,

Try http://www.snort.org/Files/10102k.rules

and

http://www.whitehats.com/ids/vision.conf


Hope this helps

l8z

andy

---------------------------------------
E-Mail: andy at ...586...
PGP/GnuPG Key available on request
Cultivating a healthy uptime addiction
---------------------------------------





More information about the Snort-users mailing list