You can also add use these, or add you own: # look for stealth port scans/sweeps alert tcp any any -> any any (msg:"SYN FIN Scan"; flags: SF;sid:9000000;) ...
確定! 回上一頁