Forums

Subscribe via email Subscribe via email
Subscribe via rss
Guest
or Ask a Question
Add a reply View Replies (4) →
Marcel
Marcel
Offline

Look up IDS/IPS rules

Resolved
0 votes
Hi,

Is there a site were i can look up the rules what they are doing. So if my IPS block ip xxx.xxx.xxx.xxx SID 3100001 then this was a " Scan detected via telnet attempt". I can't find for example what rule SID 2011716 is doing.
In Intrusion Detection and Prevention
Saturday, September 14 2013, 07:11 AM
Subscribe via email
Share this post:
Responses (4)

  • Accepted Answer

    Nick Howitt
    Nick Howitt
    Offline
    Saturday, September 14 2013, 08:30 AM - #Permalink
    Resolved
    0 votes
    Bottom of link and ET link.
    The reply is currently minimized Show

  • Accepted Answer

    Marcel
    Marcel
    Offline
    Sunday, September 15 2013, 10:41 AM - #Permalink
    Resolved
    0 votes
    Hmm I already tried your ET link. When trying the search engine there are no results. Tried differend SID's. Any idea?
    The reply is currently minimized Show

  • Accepted Answer

    Nick Howitt
    Nick Howitt
    Offline
    Sunday, September 15 2013, 11:38 AM - #Permalink
    Resolved
    0 votes
    hmm... looks like it is broken. I've just tried it with a specific ET sid and that failed.
    The reply is currently minimized Show

  • Accepted Answer

    Marcel
    Marcel
    Offline
    Sunday, September 15 2013, 06:05 PM - #Permalink
    Resolved
    0 votes
    That was my guess also. I will try again in a couple of days. Thanks for confirming.
    The reply is currently minimized Show
Your Reply