套件：snort-rules-default（2.9.15.1-6）
flexible Network Intrusion Detection System - ruleset
Snort is a libpcap-based packet sniffer/logger which can be used as a lightweight network intrusion detection system. It features rules-based logging and can perform content searching/matching in addition to detecting a variety of other attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, and much more. Snort has a real-time alerting capability, with alerts being sent to syslog, a separate "alert" file, or even to a Windows computer via Samba.
This is the Snort default ruleset, which provides a basic set of network intrusion detection rules developed by the Snort community. They can be used as a basis for development of additional rules. Users using Snort to defend networks in production environments are encouraged to update their local rulesets as described in the included documentation or using the oinkmaster package.
其他與 snort-rules-default 有關的套件
|
|
|
|
-
- dep: adduser (>= 3.11)
- add and remove users and groups
-
- dep: debconf (>= 0.2.80)
- Debian 設定管理系統
- 或者 debconf-2.0
- 本虛擬套件由這些套件填實： cdebconf, cdebconf-udeb, debconf
-
- rec: oinkmaster
- Snort rules manager
-
- sug: snort (>= 2.2.0)
- flexible Network Intrusion Detection System
- 或者 snort-pgsql (>= 2.2.0)
- 套件暫時不可用
- 或者 snort-mysql (>= 2.2.0)
- 套件暫時不可用