fwsnort 1.0

fwsnort parses the rules files included in the snort intrusion detection system and builds an equivalent iptables ruleset for as many rules as possible. fwsnort accepts command line arguments to restrict processing to any particular class of snort rules such as "ddos", "backdoor", or "web-attacks". Processing can even be restricted to a specific snort rule as identified by its "snort id" or "sid". fwsnort utilizes the iptables string match module (together with a custom patch that adds a --hex-string option to the iptables user space code) to detect application level signatures. fwsnort (optionally) makes use of the IPTables::Parse module (to be submitted to CPAN) to translate snort rules for which matching traffic could potentially be passed through the existing iptables ruleset.. Cipherdyne System and Network Security

Requirements:	No special requirements
Platforms:	Linux
Keyword:	Danger,  Fwsnort,  Iptables,  Level,  Logging,  Rules,  Scan,  Snort,  System
Users rating:	0/10