PDA

View Full Version : [ubuntu] need snort rules for some attacks


TUDORS
July 17th, 2009, 04:54 PM
dear all
i need snort rules to dtect below attacks :
1- smurf attacks
2-land attack
3-ping of death attacks
4-Teardrop attacks

TuckLive
July 18th, 2009, 01:20 AM
Snort rules are located in etc/snort/rules. You might check them to see if you already have those rules in place and activated. If not, rules are not bad to write. The Snort manual does a fairly good job at explaining the process http://www.snort.org/assets/82/snort_manual.pdf.

I'm not able to check my ruleset at the moment, but I would think you would already have those.