SlideShare a Scribd company logo
1 of 1
Download to read offline
a. What is Snort? [1]
b. According to “Snort Users Manual” (downloadable under “Docs” menu), what are the three
modes in which Snort operates and how it behaves under each mode? Show an example
command to put Snort in each mode. [6]
c. Explain the difference between the rule headers and rule options [2]
d. List 8 different types of actions Snort may take upon a rule match. Describe what each action
type does. [2]
Solution
a. Snort: Snort is an open source network capable of performing real-time traffic study and
packet-logging on IP networks. It can transmit the protocol analysis, content searching &
matching and is used to detect a range of attacks and investigates, such as buffer run over,
cautious port scans, OS fingerprinting efforts.
d. Types of snort actions:

More Related Content

More from SIGMATAX1

What are the role of environmental factors on transpiration and h.pdf
What are the role of environmental factors on transpiration and h.pdfWhat are the role of environmental factors on transpiration and h.pdf
What are the role of environmental factors on transpiration and h.pdf
SIGMATAX1
 
What will be quantization step size in numbers and in voltage for th.pdf
What will be quantization step size in numbers and in voltage for th.pdfWhat will be quantization step size in numbers and in voltage for th.pdf
What will be quantization step size in numbers and in voltage for th.pdf
SIGMATAX1
 
What is the need for a shadow page table (One or two brief sentences.pdf
What is the need for a shadow page table (One or two brief sentences.pdfWhat is the need for a shadow page table (One or two brief sentences.pdf
What is the need for a shadow page table (One or two brief sentences.pdf
SIGMATAX1
 
Some commercial airplanes recirculate approximately 50 of the cabin .pdf
Some commercial airplanes recirculate approximately 50 of the cabin .pdfSome commercial airplanes recirculate approximately 50 of the cabin .pdf
Some commercial airplanes recirculate approximately 50 of the cabin .pdf
SIGMATAX1
 
Outline the four steps in the data collection process.Explain why .pdf
Outline the four steps in the data collection process.Explain why .pdfOutline the four steps in the data collection process.Explain why .pdf
Outline the four steps in the data collection process.Explain why .pdf
SIGMATAX1
 
Implement the ADT stack by using an array stack to contain its entri.pdf
Implement the ADT stack by using an array stack to contain its entri.pdfImplement the ADT stack by using an array stack to contain its entri.pdf
Implement the ADT stack by using an array stack to contain its entri.pdf
SIGMATAX1
 
How is the energy transferred from the source to the load in any elec.pdf
How is the energy transferred from the source to the load in any elec.pdfHow is the energy transferred from the source to the load in any elec.pdf
How is the energy transferred from the source to the load in any elec.pdf
SIGMATAX1
 

More from SIGMATAX1 (20)

What are the role of environmental factors on transpiration and h.pdf
What are the role of environmental factors on transpiration and h.pdfWhat are the role of environmental factors on transpiration and h.pdf
What are the role of environmental factors on transpiration and h.pdf
 
What will be quantization step size in numbers and in voltage for th.pdf
What will be quantization step size in numbers and in voltage for th.pdfWhat will be quantization step size in numbers and in voltage for th.pdf
What will be quantization step size in numbers and in voltage for th.pdf
 
What is the need for a shadow page table (One or two brief sentences.pdf
What is the need for a shadow page table (One or two brief sentences.pdfWhat is the need for a shadow page table (One or two brief sentences.pdf
What is the need for a shadow page table (One or two brief sentences.pdf
 
What step of protein synthesis is shown in the figure elongation st.pdf
What step of protein synthesis is shown in the figure  elongation st.pdfWhat step of protein synthesis is shown in the figure  elongation st.pdf
What step of protein synthesis is shown in the figure elongation st.pdf
 
Water is forced through a contraction causing low pressure. The wat.pdf
Water is forced through a contraction causing low pressure. The wat.pdfWater is forced through a contraction causing low pressure. The wat.pdf
Water is forced through a contraction causing low pressure. The wat.pdf
 
Using a PIC 18 Write a time overflow interrupt routine that detects .pdf
Using a PIC 18 Write a time overflow interrupt routine that detects .pdfUsing a PIC 18 Write a time overflow interrupt routine that detects .pdf
Using a PIC 18 Write a time overflow interrupt routine that detects .pdf
 
The three types of mixtures are and The weak bond forming a bridge .pdf
The three types of mixtures are  and  The weak bond forming a bridge .pdfThe three types of mixtures are  and  The weak bond forming a bridge .pdf
The three types of mixtures are and The weak bond forming a bridge .pdf
 
Some commercial airplanes recirculate approximately 50 of the cabin .pdf
Some commercial airplanes recirculate approximately 50 of the cabin .pdfSome commercial airplanes recirculate approximately 50 of the cabin .pdf
Some commercial airplanes recirculate approximately 50 of the cabin .pdf
 
Solve for 02 sin 2+sin 5=0. Separate your answers with commas.pdf
Solve for 02 sin 2+sin 5=0. Separate your answers with commas.pdfSolve for 02 sin 2+sin 5=0. Separate your answers with commas.pdf
Solve for 02 sin 2+sin 5=0. Separate your answers with commas.pdf
 
Required 1. Briefly describe different computer controls available .pdf
Required 1. Briefly describe different computer controls available .pdfRequired 1. Briefly describe different computer controls available .pdf
Required 1. Briefly describe different computer controls available .pdf
 
Proponents of decentralized forms of socialism usually supportA co.pdf
Proponents of decentralized forms of socialism usually supportA co.pdfProponents of decentralized forms of socialism usually supportA co.pdf
Proponents of decentralized forms of socialism usually supportA co.pdf
 
Please convert the following C code to assembly Y86int i,j; ......pdf
Please convert the following C code to assembly Y86int i,j; ......pdfPlease convert the following C code to assembly Y86int i,j; ......pdf
Please convert the following C code to assembly Y86int i,j; ......pdf
 
Outline the four steps in the data collection process.Explain why .pdf
Outline the four steps in the data collection process.Explain why .pdfOutline the four steps in the data collection process.Explain why .pdf
Outline the four steps in the data collection process.Explain why .pdf
 
Name the author of 1847 review article that conclusively demonstrated.pdf
Name the author of 1847 review article that conclusively demonstrated.pdfName the author of 1847 review article that conclusively demonstrated.pdf
Name the author of 1847 review article that conclusively demonstrated.pdf
 
Many of our National Parks are inhabited by large numbers of black b.pdf
Many of our National Parks are inhabited by large numbers of black b.pdfMany of our National Parks are inhabited by large numbers of black b.pdf
Many of our National Parks are inhabited by large numbers of black b.pdf
 
Implement the ADT stack by using an array stack to contain its entri.pdf
Implement the ADT stack by using an array stack to contain its entri.pdfImplement the ADT stack by using an array stack to contain its entri.pdf
Implement the ADT stack by using an array stack to contain its entri.pdf
 
How is the energy transferred from the source to the load in any elec.pdf
How is the energy transferred from the source to the load in any elec.pdfHow is the energy transferred from the source to the load in any elec.pdf
How is the energy transferred from the source to the load in any elec.pdf
 
Given Rhombus RHOB Prove HSR HSO Solution We know that .pdf
Given Rhombus RHOB  Prove  HSR  HSO  Solution We know that .pdfGiven Rhombus RHOB  Prove  HSR  HSO  Solution We know that .pdf
Given Rhombus RHOB Prove HSR HSO Solution We know that .pdf
 
Find the probability mass function (PMF) of L A source of informatio.pdf
Find the probability mass function (PMF) of L A source of informatio.pdfFind the probability mass function (PMF) of L A source of informatio.pdf
Find the probability mass function (PMF) of L A source of informatio.pdf
 
Find the real part, the imaginary part, and the absolute value of sin.pdf
Find the real part, the imaginary part, and the absolute value of sin.pdfFind the real part, the imaginary part, and the absolute value of sin.pdf
Find the real part, the imaginary part, and the absolute value of sin.pdf
 

Recently uploaded

Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...
Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...
Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...
EADTU
 
Spellings Wk 4 and Wk 5 for Grade 4 at CAPS
Spellings Wk 4 and Wk 5 for Grade 4 at CAPSSpellings Wk 4 and Wk 5 for Grade 4 at CAPS
Spellings Wk 4 and Wk 5 for Grade 4 at CAPS
AnaAcapella
 
SPLICE Working Group: Reusable Code Examples
SPLICE Working Group:Reusable Code ExamplesSPLICE Working Group:Reusable Code Examples
SPLICE Working Group: Reusable Code Examples
Peter Brusilovsky
 
Orientation Canvas Course Presentation.pdf
Orientation Canvas Course Presentation.pdfOrientation Canvas Course Presentation.pdf
Orientation Canvas Course Presentation.pdf
Elizabeth Walsh
 

Recently uploaded (20)

Introduction to TechSoup’s Digital Marketing Services and Use Cases
Introduction to TechSoup’s Digital Marketing  Services and Use CasesIntroduction to TechSoup’s Digital Marketing  Services and Use Cases
Introduction to TechSoup’s Digital Marketing Services and Use Cases
 
What is 3 Way Matching Process in Odoo 17.pptx
What is 3 Way Matching Process in Odoo 17.pptxWhat is 3 Way Matching Process in Odoo 17.pptx
What is 3 Way Matching Process in Odoo 17.pptx
 
Graduate Outcomes Presentation Slides - English
Graduate Outcomes Presentation Slides - EnglishGraduate Outcomes Presentation Slides - English
Graduate Outcomes Presentation Slides - English
 
How to Add a Tool Tip to a Field in Odoo 17
How to Add a Tool Tip to a Field in Odoo 17How to Add a Tool Tip to a Field in Odoo 17
How to Add a Tool Tip to a Field in Odoo 17
 
OS-operating systems- ch05 (CPU Scheduling) ...
OS-operating systems- ch05 (CPU Scheduling) ...OS-operating systems- ch05 (CPU Scheduling) ...
OS-operating systems- ch05 (CPU Scheduling) ...
 
HMCS Max Bernays Pre-Deployment Brief (May 2024).pptx
HMCS Max Bernays Pre-Deployment Brief (May 2024).pptxHMCS Max Bernays Pre-Deployment Brief (May 2024).pptx
HMCS Max Bernays Pre-Deployment Brief (May 2024).pptx
 
How to Add New Custom Addons Path in Odoo 17
How to Add New Custom Addons Path in Odoo 17How to Add New Custom Addons Path in Odoo 17
How to Add New Custom Addons Path in Odoo 17
 
Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...
Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...
Transparency, Recognition and the role of eSealing - Ildiko Mazar and Koen No...
 
Andreas Schleicher presents at the launch of What does child empowerment mean...
Andreas Schleicher presents at the launch of What does child empowerment mean...Andreas Schleicher presents at the launch of What does child empowerment mean...
Andreas Schleicher presents at the launch of What does child empowerment mean...
 
Spellings Wk 4 and Wk 5 for Grade 4 at CAPS
Spellings Wk 4 and Wk 5 for Grade 4 at CAPSSpellings Wk 4 and Wk 5 for Grade 4 at CAPS
Spellings Wk 4 and Wk 5 for Grade 4 at CAPS
 
Understanding Accommodations and Modifications
Understanding  Accommodations and ModificationsUnderstanding  Accommodations and Modifications
Understanding Accommodations and Modifications
 
How to Manage Call for Tendor in Odoo 17
How to Manage Call for Tendor in Odoo 17How to Manage Call for Tendor in Odoo 17
How to Manage Call for Tendor in Odoo 17
 
Jamworks pilot and AI at Jisc (20/03/2024)
Jamworks pilot and AI at Jisc (20/03/2024)Jamworks pilot and AI at Jisc (20/03/2024)
Jamworks pilot and AI at Jisc (20/03/2024)
 
Observing-Correct-Grammar-in-Making-Definitions.pptx
Observing-Correct-Grammar-in-Making-Definitions.pptxObserving-Correct-Grammar-in-Making-Definitions.pptx
Observing-Correct-Grammar-in-Making-Definitions.pptx
 
Details on CBSE Compartment Exam.pptx1111
Details on CBSE Compartment Exam.pptx1111Details on CBSE Compartment Exam.pptx1111
Details on CBSE Compartment Exam.pptx1111
 
SPLICE Working Group: Reusable Code Examples
SPLICE Working Group:Reusable Code ExamplesSPLICE Working Group:Reusable Code Examples
SPLICE Working Group: Reusable Code Examples
 
Orientation Canvas Course Presentation.pdf
Orientation Canvas Course Presentation.pdfOrientation Canvas Course Presentation.pdf
Orientation Canvas Course Presentation.pdf
 
FICTIONAL SALESMAN/SALESMAN SNSW 2024.pdf
FICTIONAL SALESMAN/SALESMAN SNSW 2024.pdfFICTIONAL SALESMAN/SALESMAN SNSW 2024.pdf
FICTIONAL SALESMAN/SALESMAN SNSW 2024.pdf
 
HMCS Vancouver Pre-Deployment Brief - May 2024 (Web Version).pptx
HMCS Vancouver Pre-Deployment Brief - May 2024 (Web Version).pptxHMCS Vancouver Pre-Deployment Brief - May 2024 (Web Version).pptx
HMCS Vancouver Pre-Deployment Brief - May 2024 (Web Version).pptx
 
Including Mental Health Support in Project Delivery, 14 May.pdf
Including Mental Health Support in Project Delivery, 14 May.pdfIncluding Mental Health Support in Project Delivery, 14 May.pdf
Including Mental Health Support in Project Delivery, 14 May.pdf
 

a. What is Snort [1]b. According to “Snort Users Manual” (downloa.pdf

  • 1. a. What is Snort? [1] b. According to “Snort Users Manual” (downloadable under “Docs” menu), what are the three modes in which Snort operates and how it behaves under each mode? Show an example command to put Snort in each mode. [6] c. Explain the difference between the rule headers and rule options [2] d. List 8 different types of actions Snort may take upon a rule match. Describe what each action type does. [2] Solution a. Snort: Snort is an open source network capable of performing real-time traffic study and packet-logging on IP networks. It can transmit the protocol analysis, content searching & matching and is used to detect a range of attacks and investigates, such as buffer run over, cautious port scans, OS fingerprinting efforts. d. Types of snort actions: