What information is contained in the options section of a Snort rule?
- direction of traffic flow
- source and destination address
- action to be taken
- text describing the event
Answers Explanation & Hints:
Snort rules consist of two sections, the rules header and the rule options. The rule options section of a snort rule consists of the messages text displayed to describe an alert as well as metadata about the alert. |