fwsnort 介绍
fwsnort 用来将 snort 的规则转成
iptables 的规则。
By making use of the iptables string match module, fwsnort can detect
application layer signatures which exist in many snort rules. fwsnort adds a
–hex-string option to iptables, which allows snort rules that contain hex
characters to be input directly into iptables rulesets without modification.
In addition, fwsnort makes use of the IPTables::Parse Perl module in order to
(optionally) restrict the snort rule translation to only those rules that
specify traffic that could potentially be allowed through an existing iptables
policy.
fwsnort 官网
http://www.cipherdyne.org/projects/fwsnort/
版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 [email protected] 举报，一经查实，本站将立刻删除。