Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Rules » Rules Docs?

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Rules Docs?


Posted by pastor on March 25, 2005 11:56:16

Hi all,
well, where I can find some explanation docs about snort rules? I need something that can explain why snort send an alert on any case...
I got sid 1676 alert (Oracle Select Union) and I don't know why this is an alert.
Thanks.

Posted by novowels on March 26, 2005 12:14:00

You can get documentation on the specific rules from snort.org using the rules search or in the doc/signatures/ directory distributed with the snort sources.