blacklight/Snort_AIPreproc
1
0
Fork 0
mirror of https://github.com/BlackLight/Snort_AIPreproc.git synced 2024-11-24 04:35:11 +01:00
Code Issues Projects Releases Packages Wiki Activity

Adding more ICMP ping hyperalert modules

Browse source
This commit is contained in:
BlackLight 2011-02-10 20:23:23 +01:00
parent 829a6d3616
commit e0e669f278
3 changed files with 27 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
corr_rules/1-366-7.xml Normal file
View file

@ -0,0 +1,9 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE hyperalert PUBLIC "-//blacklight//DTD HYPERALERT SNORT MODEL//EN" "http://0x00.ath.cx/hyperalert.dtd">
<hyperalert>
<snort-id>1.366.7</snort-id>
<desc>ICMP PING *NIX</desc>
<post>HostExists(+DST_ADDR+)</post>
</hyperalert>

9
corr_rules/1-368-6.xml Normal file
View file

@ -0,0 +1,9 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE hyperalert PUBLIC "-//blacklight//DTD HYPERALERT SNORT MODEL//EN" "http://0x00.ath.cx/hyperalert.dtd">
<hyperalert>
<snort-id>1.368.6</snort-id>
<desc>ICMP PING BSDtype</desc>
<post>HostExists(+DST_ADDR+)</post>
</hyperalert>

9
corr_rules/1-384-5.xml Normal file
View file

@ -0,0 +1,9 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE hyperalert PUBLIC "-//blacklight//DTD HYPERALERT SNORT MODEL//EN" "http://0x00.ath.cx/hyperalert.dtd">
<hyperalert>
<snort-id>1.384.5</snort-id>
<desc>ICMP PING</desc>
<post>HostExists(+DST_ADDR+)</post>
</hyperalert>