[Snort-users] Question about rules
ricardobarbosams at ...6873...
Wed Jan 27 00:52:08 EST 2010
Hello I am entering the world of IPs and began to test and learn
snort, but I have a question about creating rules. I
I was reading the snort manual in PDF file and has a chapter of
writing rules, following the documentation I created a rule as
alert tcp any any -> 10.0.0.0/8 80 (content:"test_rule"; msg: "TEST
assembled a network with virtualbox with the following topology
10.0.0.0/8(.2) <---> (.1) snort (.1) <---> 18.104.22.168/8(.2)
I put a web server (apache) on 10.0.0.2 and created the following html
and from the machine 22.214.171.124 try to access this page through snort,
looking at the above rule should not generate an alert in the
Can someone help me where I'm missing?
Fao?=a ligao?=o?=es para outros computadores com o novo Yahoo! Messenger
More information about the Snort-users