Skip to content

Instantly share code, notes, and snippets.

@wall-e-08

wall-e-08/snort-personal-cookbook.sh

Last active April 17, 2024 18:54
Show Gist options
  • Save wall-e-08/bf02603cb2b9b209d0e6ae778f198630 to your computer and use it in GitHub Desktop.
Save wall-e-08/bf02603cb2b9b209d0e6ae778f198630 to your computer and use it in GitHub Desktop.
Download ZIP
SNORT cookbook
Raw
snort-personal-cookbook.sh
###############################
##### SNORT rule creator ######
# http://snorpy.cyb3rs3c.net/ #
###############################
# Test configuration file
sudo snort -T -i enp0s3 -c /etc/snort/snort.conf
# ping alert #01
sudo snort -q -l /var/log/snort -i enp0s3 -A console -c /etc/snort/snort.conf
# RULES:
# Alert on ping #01
alert icmp any any -> $HOME_NET any ( sid:100; rev:1; )
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment