[Snort-users] Snort and Synflood alerts

Scott Teeters Jr steeters at ...4297...
Tue Jan 15 08:57:11 EST 2002


I am working on implementing Snort as our defacto IDS. One of the items my 
manager wants to see is our synflood activity. Synfloods have been a pain 
in our side in the past and we want to be able to break out the synflood 
activity as a separate item in our reporting. I need to know if anyone has 
seen a Snort signature that specifically targets synfloods?
Thanks,
Scott Teeters, Jr.






More information about the Snort-users mailing list