[Snort-users] Detecting repeated web requests

Sheahan, Paul Paul.Sheahan at ...2218...
Thu Oct 21 11:54:49 EDT 2004



I'd like to use Snort to do the following and wonder first of all, if it
is capable of doing so?


1.	If x number of repeated web requests (GETs) come in of the SAME
exact type in a short time period, (which wouldn't happen under normal
circumstances) then alert.
2.	Or if many web requests of ANY type come in a short time period
(indicating non-human activity), then alert.



Does anyone know if these types of checks are possible in Snort?




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041021/2f45d6de/attachment.html>

More information about the Snort-users mailing list