| Search Site |
| Search Rules |
| Account |
| not registered? |
| can't login? |
| user preferences |
 |
 |
|
|||||||||||||||||||
Snort® Users Manual
2.4.0RC1
Copyright ©1998-2003 Martin Roesch
Copyright ©2001-2003 Chris Green
Copyright ©2003-2005 Sourcefire, Inc.
- Contents
- 1. Snort Overview
- 1.1 Getting Started
- 1.2 Sniffer Mode
- 1.3 Packet Logger Mode
- 1.4 Network Intrusion Detection Mode
- 1.5 Inline Mode
- 1.6 Miscellaneous
- 1.7 More Information
- 2. Configuring Snort
- 3. Writing Snort Rules
How to Write Snort Rules and Keep Your Sanity- 3.1 The Basics
- 3.2 Rules Headers
- 3.3 Rule Options
- 3.4 Meta-Data Rule Options
- 3.5 Payload Detection Rule Options
- 3.6 Non-payload Detection Rule Options
- 3.7 Post-Detection Rule Options
- 3.8 Event Thresholding
- 3.9 Event Suppression
- 3.10 Snort Multi-Event Logging (Event Queue)
- 3.11 Writing Good Rules
- 4. Making Snort Faster
- 5. Snort Development
- Bibliography
| site feedback | Terms of Use | Privacy Policy | forum archives ©2008 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved. |