By taking a look at each, you'll get a basic idea of what you can do with Snort rules.
通过查看每一种类型,您将大致了解使用Snort规则可以实现哪些操作。
Really, it's good use of Snort rules that saves you the work of manual packet analysis.
实际上,使用Snort规则可以省去手工分析包的工作。
Rather than you spending hours digging into packets, you can set Snort to handle analysis, and have Snort alert you when there are problems; you do this by giving Snort a set of rules.
不需花大量时间研究包,可以对Snort进行设置来处理分析,并在发生问题时收到Snort的警报;这些功能是通过为Snort指定一组规则实现的。
应用推荐