[Snort-users] Snort rule for TCP Portscan and PortSweep

Tran M. Thang tmthang at ...15658...
Wed Jun 20 13:12:58 EDT 2012


Hi,

Any one can help me to write snort rules for detecting "TCP Portscan and PortSweep" scan? I knew that snort has modules to detect types of scan. But i want to have custom rules that can use plugin snortsam to block types of scan.

Thanks  




More information about the Snort-users mailing list