Server Ku

Thursday, 10 January 2013

How to use custom Snort Rules in IBM Provincia GX 5108 by serverku


How to use custom Snort Rules in IBM Provincia GX 5108











alert tcp any any -> 46.236.100.36 80 (msg:"PTCL local.se accessed"; content:"local.se"; nocase; sid:5001;)

NOTE: if the content:"" parameter is not defined, the IPS will not be able to log the events, as it looks content in the packets
Posted by Jason at 02:08 No comments:
Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Labels: IBM Provincia
Newer Posts Older Posts Home
Subscribe to: Posts (Atom)

About Me

Jason
View my complete profile

Blog Archive

  • ▼  2016 (4)
    • ▼  August (1)
      • Email Notification for DBA Monitoring and Alerts -...
    • ►  July (1)
    • ►  May (1)
    • ►  January (1)
  • ►  2015 (121)
    • ►  November (1)
    • ►  October (2)
    • ►  September (5)
    • ►  August (5)
    • ►  July (4)
    • ►  June (12)
    • ►  May (69)
    • ►  April (23)
  • ►  2014 (2)
    • ►  April (1)
    • ►  January (1)
  • ►  2013 (25)
    • ►  October (3)
    • ►  July (2)
    • ►  April (8)
    • ►  March (1)
    • ►  February (8)
    • ►  January (3)
  • ►  2012 (13)
    • ►  December (5)
    • ►  August (1)
    • ►  February (3)
    • ►  January (4)
  • ►  2011 (20)
    • ►  December (6)
    • ►  November (6)
    • ►  October (4)
    • ►  September (4)
  • ►  2009 (1)
    • ►  March (1)
Simple theme. Powered by Blogger.