wiki:ExperimentLog
close Warning: Can't synchronize with repository "(default)" (Unsupported version control system "svn": /usr/lib/python2.7/dist-packages/libsvn/_fs.so: failed to map segment from shared object: Cannot allocate memory). Look in the Trac log for more information.

Version 3 (modified by waue, 18 years ago) (diff)

--

  1. 實驗一

參數 說明
$dst_IP 被攻擊的IP
$src_IP 攻擊來源IP
$alert_name 警訊名稱
$sid snort警訊編號
$priority 攻擊等級: 1~3 (強~弱)
$class 攻擊分類名稱
$src_port 來源port
$dst_port 被攻擊的port
$type 封包型態

實驗一

格式： $dst_IP : $sid

ColumnFamily? : ColumnQulify? cell value
name:$alert_name priority=$priority;class=$class
from:$source $src_IP : $src_port => $dst_IP : $dst_port
payload:$type $type