Snort - the de facto standard for intrusion detection/prevention
next up previous contents
Next: Content Matching Up: Writing Snort Rules: How Previous: Event Queue Configuration Examples   Contents

Writing Good Rules

There are some general concepts to keep in mind when developing Snort rules to maximize efficiency and speed.



Subsections

Steven Sturges 2007-05-11