[Snort-users] rule definition

Abid Ayoub abid.ayoub at ...11827...
Mon Sep 2 09:18:41 EDT 2013


Hello,

I want to define a spcial ping like attack. For example, when the data send
in the ping is defined bigger than the normal ping , or when the number of
ping is 1000 ping /min.
So is that possible with snort ?
how can i do that ?

Regards
Abid
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130902/4c44af8b/attachment.html>


More information about the Snort-users mailing list