Index

253

contrib 

directory, 31, 164 165

dump_payload directive, 114

count argument, 

tag 

keyword, 110

dump_payload_verbose directive, 115

CREATE command, 163

E

create_mysql 

script, 164 165

Easy IDS, 218 219

CSV output module, 151 153

Encoding parameter, databases used with 

options, 152 153

Snort, 151

Ctrl C, 41, 59

Encryption, 1

CVE, 104, 105

Escalation process, 11

D

established option, 

flow 

keyword, 109

daemon directive, 114

etc 

directory, 31

Data packets, and signatures, 7

etc/init.d 

directory, 56

Databases:

/etc/init.d/snort 

script, 52

list of parameters for, 151

/etc/samba/smb.conf 

file, 70 71

logging to, 150 151

/etc/snort 

directory, 57

Dbname parameter, databases used with 

etc/snort/snort.conf

, 65

fn

Snort, 151

/etc/syslog.conf 

file, 142

 d command line option, 114

eth0 

interface, 20, 54, 72

 D command line option, 55, 114, 115

eth1 

interface, 51, 54, 72

decode_arp directive, 114

Ethernet, 13

decode_data_link directive, 114

eXtensible Markup Language (XML), 16, 156

DELETE command, 163

EXTERNAL_NET, 113

Demilitarized zone (DMZ), networks, 9

$EXTERNAL_NET variable, 128

depth 

keyword, 94, 95

Destination address, 81

F

Detail parameter, databases used with Snort, 

F field, IP packet header, 238

151

False alarms, 7 8

Detection engine, 14 16, 155

Fast mode, 67 68

detect_scan argument, stream4module, 137

 F command line option, 114

detect_state_problems argument, 

File parameter, XML module, 146

stream4module, 137

File Transfer Protocol (FTP), 9

Detination Address field, IP packet header, 

FIN packet, 104

238

Firewalls, 1 2, 26

direction argument, 

tag 

keyword, 110

flags 

keyword, 96 97

DNS header, 15

Flags or Control Bits field, TCP packet head 

doc 

directory, 31

er, 240

Don't Fragment Bit (DF), 97

Flexible Responde (FlexResp), 105 107

Drop, use of term, 75

flow 

keyword, 108 109

dsize 

keyword, 95 96

Frag Offset field, IP packet header, 238

dsniff package, 138

fragbits 

keyword, 97

dump_chars_only directive, 114

Fragmentation, 14