Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Snort Challenge - The Basics

Put your snort skills into practice and write snort rules to analyse live capture network traffic.

Task 1: Introduction

Task 2: Writing IDS Rules (HTTP)

Task 3: Writing IDS Rules (FTP)

Task 4: Writing IDS Rules (PNG)

Task 5: Writing IDS Rules (Torrent Metafile)

Task 6: Troubleshooting Rule Syntax Errors

Task 7: Using External Rules (MS17-010)

Task 8: Using External Rules (Log4j)

Task 9: Conclusion

Room Icon

Snort Challenge - The Basics

Premium room

Put your snort skills into practice and write snort rules to analyse live capture network traffic.

medium

90 min

48,239

User profile photo.
User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting the Lab Machine, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Lab machine
Status:Off



The room invites you a challenge to investigate a series of traffic data and stop malicious activity under two different scenarios. Let's start working with Snort to analyse live and captured traffic.

We recommend completing the Snort room first, which will teach you how to use the tool in depth.




Exercise files for each task are located on the desktop as follows;



Answer the questions below
Read the task above.