全部博文(168)
| 标题 | 阅读 | 评论 | 转发 | 发布日期 | |
|---|---|---|---|---|---|
| 使用guestmount挂载KVM虚拟机的磁盘 | 3285 | 0 | 0 | 2016-01-19 | |
| Ntop网络流量监控 | 3336 | 0 | 1 | 2012-06-12 | |
| cacti 监控磁盘使用率并报警方法 | 2037 | 0 | 1 | 2008-11-08 | |
| Squid集群做CDN全网加速 | 1272 | 0 | 1 | 2008-08-01 | |
| 配置Linux下的动态DNS服务全攻略 | 2450 | 0 | 0 | 2008-01-11 | |
| 将Web应用程序从Tomcat迁移到WebSphere | 3539 | 0 | 0 | 2007-10-24 | |
| 使用mod_bandwidth模块为apache提供带宽限制 | 2194 | 0 | 0 | 2007-09-29 | |
| IPv6地址设置及使用方法 | 3749 | 0 | 0 | 2007-06-13 | |
| iptables+静态路由配置双外网接入 | 1515 | 0 | 1 | 2007-06-02 | |
| 通过对TOS的优化来提高防火墙的整体性能 | 1433 | 0 | 0 | 2007-06-02 | |
| iptables防火墙脚本[官方样例] | 1121 | 0 | 0 | 2007-06-02 | |
| vsftpd手册 | 910 | 0 | 1 | 2007-06-02 | |
| DDNS动态域名解析 | 3152 | 0 | 0 | 2007-06-02 | |
| cacti+rrdtool高级流量监控 | 2135 | 0 | 0 | 2007-06-02 |
chinaunix网友2009-05-05 10:02
在配置文件snort.conf中加入下列一行 alert tcp any any -> any any (flags:S; msg:"SYN Packets Alert!"; sid:20081122客户访问在网页上可以产生报警,并在mysql数据库中可以看到报警的记录存入,去掉后该行后,利用常见扫描软件如Languard、bluescan、nmap -sS Server_IP扫描等均不报警,请请您帮忙看看,使用哪个工具进行扫描或攻击才可以让其报警, 另在启动过程中出现下列警告,请帮忙看看是否正常 Warning: 'ignore_any_rules' option for Stream5 UDP disabled because of UDP rule with flow or flowbits option Warning: flowbits key 'Backdoor.Bersek.Init' is set but not ever checked. Warning: flowbits key 'wmf.download' is set but not ever checked. Warning: flowbits key 'snipernet' is set but not ever checked. Warning: flowbits key 'backup_file.request' is set but not ever checked. Warning: flowbits key 'Mantis_Notify2' is set but not ever checked. Warning: flowbits key 'MinicomLite' is set but not ever checked. Warning: flowbits key 'emf.request' is set but not ever checked. 另外请推荐在SNORT网页下载那个库比较适用谢谢了 msn:navywang@msn.com