Find centralized, trusted content and collaborate around the technologies you use most.
Teams
Q&A for work
Connect and share knowledge within a single location that is structured and easy to search.
任何人都可以给我一些规则来测试 Snort（ARP、ICMP、TCP、UDP）并确保我的系统能够正常工作以抵御 DOS 或 MITM 等攻击。
alert tcp any any -> any any (flags: S; msg:" possible TCP dos detection"; flow: stateless; detection_filter: track by_dst, count 1000, seconds 1; sid: 10004;rev:1;)