[Snort-users] help: how to block the_scan when use snort3.0 for port scan detecting ?

sofardware sofardware at 126.com
Mon Feb 11 02:19:53 EST 2019


      Hi all,
      I found the following words in snort3 user manual,but the manual  does not say how to config the snort3 to realize blocking the scan? Who can tell me how ?Thank you very much.
      16.2 Features Improved over Snort 2
              port_scan can block scans (Snort 2 can only detect scans)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20190211/a11305fc/attachment.html>


More information about the Snort-users mailing list