SNORTIFY
A Web Based Snort Rule Creator
Toggle Theme
s
Action
alert
log
pass
activate
dynamic
drop
reject
sdrop
Protocol
tcp
icmp
udp
ip
Priority
1
2
3
4
5
IP Options
TTL
!
IP PROTOCOL
TCP Options
HTTP REQUEST METHOD
GET
POST
HEAD
TRACE
PUT
DELETE
CONNECT
HTTP RESPONSE CODE
200
301
302
400
401
403
404
500
502
503
TCP Flags:
ACK
SYN
PSH
RST
FIN
URG
+
*
DIRECTION
from_server
to_server
to_client
from_client
TCP STATE
established
stateless
not_established
UDP Options
DIRECTION
FROM_SERVER
TO_SERVER
TO_CLIENT
FROM_CLIENT
ICMP Options
ICMP TYPE
>
<
ICMP CODE
>
<
Data Size
>
<
Reference
URL
CVE
BUG
MSB
Threshold Type
limit
threshold
both
Track By
by_src
by_dst
Add Content Match
nocase
uri
not
Add Regex Match
dotall /s
nocase
greedy /G
newline /m
whitespace /x
->
(
)
Copied to Clipboard!