Link to home
Start Free TrialLog in
Avatar of sunwsposelr60068
sunwsposelr60068

asked on

How about DOS rule of Snort?

I install ok Snort + IDSCenter + Winpcap
OS: w2003

Snort run well, but I have not rule for DOS HTTP
my server run IIS
I 'attack' DOS by sending 1000 query/s to home page, but Snort not recorgnize DOS

What about DOS rules for snort ?

Thanks!
Avatar of Phateon
Phateon
Flag of India image

This is an old .conf file, but you might try it - http://www.0xdeadbeef.info/conf/snort.conf.190
Avatar of sunwsposelr60068
sunwsposelr60068

ASKER

I tried, not success, because have not RULE files, only configfile?
Yes. It is a config file.
but how about rules to recorgnize DOS HTTP?
ASKER CERTIFIED SOLUTION
Avatar of Phateon
Phateon
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial