mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
21 lines
782 B
Text
21 lines
782 B
Text
# $Id: snort.bro 720 2004-11-12 16:45:48Z rwinslow $
|
|
#
|
|
# Definitions needed for signatures converted by snort2bro.
|
|
|
|
# Servers for some services.
|
|
const dns_servers: set[subnet] = { local_nets } &redef;
|
|
const http_servers: set[subnet] = { local_nets } &redef;
|
|
const smtp_servers: set[subnet] = { local_nets } &redef;
|
|
const telnet_servers: set[subnet] = { local_nets } &redef;
|
|
const sql_servers: set[subnet] = { local_nets } &redef;
|
|
|
|
const aim_servers: set[subnet] = {
|
|
64.12.24.0/24, 64.12.25.0/24, 64.12.26.14/24, 64.12.28.0/24,
|
|
64.12.29.0/24, 64.12.161.0/24, 64.12.163.0/24, 205.188.5.0/24,
|
|
205.188.9.0/24
|
|
} &redef;
|
|
|
|
# Ports for some services.
|
|
const http_ports = { 80/tcp, 8000/tcp, 8001/tcp, 8080/tcp };
|
|
const oracle_ports = { 1521/tcp };
|
|
const non_shellcode_ports = { 80/tcp };
|