| 标题 | 阅读 | 评论 | 转发 | 发布日期 | |
|---|---|---|---|---|---|
| Oracle 11g数据库的命令行安装 | 7723 | 0 | 0 | 2012-12-20 | |
| 使用extundelete恢复误删除的文件 | 4947 | 0 | 0 | 2012-09-08 | |
| MySQL数据库主从复制 | 4364 | 0 | 1 | 2012-07-27 | |
| 搭建PXE装机服务器的测试脚本 | 1959 | 0 | 1 | 2012-07-13 | |
| 将Linux主机加入Windows域 | 8347 | 1 | 3 | 2012-06-28 | |
| libcgroup资源控制 | 7248 | 0 | 1 | 2012-06-25 | |
| Ntop网络流量监控 | 3171 | 0 | 1 | 2012-06-12 | |
| 构建IMAPS服务+CA证书应用 | 1863 | 0 | 0 | 2012-02-28 | |
| DNS主从+TSIG认证+View视图配置 | 2624 | 1 | 0 | 2012-02-28 | |
| 解决在Linux下安装Oracle时的中文乱码问题 | 3154 | 0 | 0 | 2012-02-28 | |
| 【推荐】 在Linux服务器中安装JDK环境 | 1805 | 0 | 1 | 2012-02-28 | |
| iSCSI存储设备的udev绑定 | 5474 | 0 | 0 | 2012-01-06 |
chinaunix网友2009-05-05 10:02
在配置文件snort.conf中加入下列一行 alert tcp any any -> any any (flags:S; msg:"SYN Packets Alert!"; sid:20081122客户访问在网页上可以产生报警，并在mysql数据库中可以看到报警的记录存入，去掉后该行后，利用常见扫描软件如Languard、bluescan、nmap -sS Server_IP扫描等均不报警，请请您帮忙看看，使用哪个工具进行扫描或攻击才可以让其报警， 另在启动过程中出现下列警告，请帮忙看看是否正常 Warning: 'ignore_any_rules' option for Stream5 UDP disabled because of UDP rule with flow or flowbits option Warning: flowbits key 'Backdoor.Bersek.Init' is set but not ever checked. Warning: flowbits key 'wmf.download' is set but not ever checked. Warning: flowbits key 'snipernet' is set but not ever checked. Warning: flowbits key 'backup_file.request' is set but not ever checked. Warning: flowbits key 'Mantis_Notify2' is set but not ever checked. Warning: flowbits key 'MinicomLite' is set but not ever checked. Warning: flowbits key 'emf.request' is set but not ever checked. 另外请推荐在SNORT网页下载那个库比较适用谢谢了 msn：navywang@msn.com
