How to set a rule that used by snort to detect an ack, Ask an Expert

Engineering

Question

An ACK scan does not provide in order about whether a target machine's ports are open or closed, except rather whether or not access to those ports is being blocked by a firewall. If there is no response or an ICMP "destination unreachable" packet is received as a response, then port is blocked by a firewall. If scanned port replies with a RST packet, then ACK packet reached its intended host. So end port is not being filtered by a firewall. Note, though, that port itself may be open or closed.

Describe a rule or a set of rules that might be used by Snort to detect an ACK scan. Cleary express your assumption and explain your rules. What do you think Bro can do a better job detecting an ACK scan? Describe your answer in details.

View complete question

Computer Engineering, Engineering

Category:- Computer Engineering
Reference No.:- M9132686

Have any Question?Write your Review or question?

Related Questions in Computer Engineering

Requirementswrite a java program that reads a set of

Requirements: Write a java program that reads a set of integer lattice points, prints out the ones on the boundry of the convex hull sorted left to right (ie by x-coordinate), and then accepts additional points and deter ...

Recommendations what improvements could you offer as an it

Recommendations: What improvements could you offer as an IT leader managing the strategy for the situation covered by the case? Consider time, cost, human capital, and the current status IT within the organization. Maint ...

A magazine provided results from a poll of 1500 adults who

A magazine provided results from a poll of 1500 adults who were asked to identify their favorite pie. Among the 1500 ?respondents, 14?% chose chocolate? pie, and the margin of error was given as plus or minus ±3 percenta ...

What are information silos what are the problems caused by

What are information silos? What are the problems caused by information silos? How organizations can solve the problems caused by information silos?

Problemtelephone calls arrive at the rate of 12 per hour at

Problem Telephone calls arrive at the rate of 12 per hour at the reservation desk for Regional Airways. a. Find the probability of receiving 3 calls in a 4-minute interval. If required, round your answer to four decimal ...

Are search algorithms tied to data structures being

Are search algorithms tied to data structures being searched, or can they be utilized in other scenarios?

Directionspick one topic for word and one topic

Directions Pick one topic for Word and one topic for PowerPoint to discuss. Word Watermark: What is the purpose of watermark for a document? What do you consider when you work on a watermark in Word? Newsletter: What are ...

Letang industrial systems company lisc is trying to decide

Letang Industrial Systems Company (LISC) is trying to decide between two different conveyor belt systems. System A costs $300,000, has a four-year life, and requires $101,000 in pretax annual operating costs. System B co ...

Question suppose that you have a set of n files that have

Question : Suppose that you have a set of n files that have to be copied on 1GB USB drives. You can assume that the file sizes are known and always less than or equal to 1GB. The objective is to use the minimum possible ...

Take screenshots of functions running in clisplet x1 x2 xn

Take screenshots of functions running in cLISP, Let x1, x2, ...xN be a set of input features. A linear function that represent those features, will have a following form: Fw(x1, x2, .. xn)= w0 + w1 * x1 + w2 * x2 +... + ...

4,153,160 Questions Asked
13,132 Experts
2,558,936 Questions Answered

Ask Experts for help!!

Looking for Assignment Help?

Start excelling in your Courses, Get help with Assignment

Write us your full requirement for evaluation and you will receive response within 20 minutes turnaround time.

Ask Now Help with Problems, Get a Best Answer

Recent Questions

Ask Computer Engineering Expert