Snort

Snort


참고
https://www.snort.org/


SID 찾기
https://lists.astaro.com/ASGV9-IPS-rules.html

문법
https://net123.tistory.com/579


설치
http://kangmyounghun.blogspot.com/2015/02/snort.html


offset / depth / distance / within
패턴을 찾는 범위를 지정할 때 사용 / 0부터 시작
https://5log.tistory.com/198

https://kthan.tistory.com/entry/%EC%8A%A4%EB%85%B8%ED%8A%B8-Snort-rule-content-%EC%98%B5%EC%85%98%EC%97%90-%EB%8C%80%ED%95%9C-%EB%AA%A8%EB%93%A0%EA%B2%83


참고
http://kangmyounghun.blogspot.com/2015/07/snort.html

http://leekyu.net/board_03/365