[Snort-users] Detecting concurrent connections

Chris Green cmg at ...1935...
Wed Jun 12 11:00:04 EDT 2002

Renato Araújo <renato at ...6058...> writes:

> I want to configure snort rule to detect if there is a a number of
> concurrent conections to a server. Example, I want snort to detect if
> anyone has 15 or more conections simultaneously established to my
> smtp server.

Not currently.
Chris Green <cmg at ...1935...>
"Yeah, but you're taking the universe out of context."

More information about the Snort-users mailing list