Index

257

Options field, TCP packet header, 241

 p command line option, 115

Oracle, 23, 25, 150

PHP (Pretty Home Page), 3 4, 24, 25, 178

order directive, 114

downloading, 180

Output module:

web site, 207

configuring, 116

PHPLOT, 3 4, 24, 178, 180, 181, 207

and 

snort.conf

, 112

downloading, 180

Output modules, 15 16, 139 155

pkt_count directive, 115

alert_fast output module, 143

Platforms, 18 19

alert_full output module, 143

Plugins, 131 156

alert_smb module, 143 144

Port address, 81

alert_syslog output module, 140 142

Port number, 86 88, 113

commonly used, 139

negation symbol, 87

CSV output module, 151 153

port ranges, 87

CSV options, 152 153

upper and lower boundaries, 87

defining in the Snort configuration file, 

139

well known port numbers, 87 88

log null output module, 155

Port parameter:

logging to databases, 150 151

databases used with Snort, 151

log_tcpdump output module, 144 145

XML module, 146

SNMP traps output module, 154

ports argument, to stream4_reassembly pre 

unified logging output module, 153 154

processor, 137

XML output module, 146 150

portscan ignorehosts, 135

examples, 147 150

PostgresSQL, 25

parameters used with, 146

PPP, 13

P

Pre compiled binary packages, and Snort in 

Packet:

stallation, 28

application layer level header, 15

Predefined action types, and 

snort.conf

, 112

packet payload, 15

PREFIX

, 33 34

transport layer head, 14

  prefix 

command line option, 34

Packet data, 59 61

preprocessor 

keyword, 133

Packet decoder, 12, 13, 16

Preprocessors, 13 14, 16, 132 139

Packet header formats, 237 244

ARP spooling, 138 139

ARP packet header, 241 242

configuring, 116

ICMP packet header, 238 239

defined, 13

IP packet header, 237 238

frag2 module, 135 136

TCP packet header, 240 241

HTTP decode, 133 134

UDP packet header, 241

port scanning, 134 135

Packet payload, 15

spade module, 137

Pass rules, 119

stream4 module, 136 137

Pass, use of term, 75

priority keyboard, 103 104

Password parameter, databases used with 

Proto Addr Length field, ARP packet header, 

Snort, 151

242