Writing Snort Rules On EnGarde

There are already tons of written Snort rules, but there just might
be a time where you need to write one yourself. You can think of
writing Snort rules as writing a program. They can include variables,
keywords and functions. Why do we need to write rules? The reason is,
without rules Snort will never detect someone trying to hack your
machine. This HOWTO will give you confidence to write your own rules.

Read more…