[Snort-users] Detecting repeated web requests
Paul.Sheahan at ...2218...
Thu Oct 21 11:54:49 EDT 2004
I'd like to use Snort to do the following and wonder first of all, if it
is capable of doing so?
1. If x number of repeated web requests (GETs) come in of the SAME
exact type in a short time period, (which wouldn't happen under normal
circumstances) then alert.
2. Or if many web requests of ANY type come in a short time period
(indicating non-human activity), then alert.
Does anyone know if these types of checks are possible in Snort?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users