[Snort-users] SSH rules

Dave Loutrel (ACME) dbl at ...4167...
Tue Nov 27 08:33:07 EST 2001


I am just beginning to play with snort.  After about 30 minutes of Googletime, trying to find some existing rules for SSH, I decided to ask for some help.

We're seeing a number of attempted ssh logins and would like to write some rules for snort to alert on these.  

Could someone point me in the right direction?

Thanks

Dave Loutrel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20011127/b77f9831/attachment.html>


More information about the Snort-users mailing list