-rw-r--r-- 1 snort snort 4708034 Sep 24 16:15 /etc/snort/sid-msg.map drwx------. 8 snort snort 4096 Sep 25 09:34 snort drwxr-xr-x 3 snort snort 4096 Aug 30 12:32 so_rules -rw-r--r-- 1 snort snort 19191 Aug 9 15:52 app-detect.rules -rw-r--r-- 1 snort snort 1061 May 7 01:53 attack-responses.rules -rw-r--r-- 1 snort snort 1037 May 7 01:53 backdoor.rules -rw-r--r-- 1 snort snort 1046 May 7 01:53 bad-traffic.rules -rw-r--r-- 1 snort snort 616199 Aug 9 15:52 blacklist.rules -rw-r--r-- 1 snort snort 1043 May 7 01:53 botnet-cnc.rules -rw-r--r-- 1 snort snort 6166 Jun 11 20:40 browser-chrome.rules -rw-r--r-- 1 snort snort 75273 Jun 11 20:40 browser-firefox.rules -rw-r--r-- 1 snort snort 288240 Aug 12 16:43 browser-ie.rules -rw-r--r-- 1 snort snort 11560 Aug 9 15:52 browser-other.rules -rw-r--r-- 1 snort snort 1207986 Aug 12 16:43 browser-plugins.rules -rw-r--r-- 1 snort snort 26096 Jun 11 20:40 browser-webkit.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 chat.rules -rw-r--r-- 1 snort snort 1075087 Sep 14 13:32 community.rules -rw-r--r-- 1 snort snort 8762 Jun 11 20:40 content-replace.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 ddos.rules -rw-r--r-- 1 snort snort 6281934 Jun 11 20:40 deleted.rules -rw-r--r-- 1 snort snort 1020 Aug 9 15:52 dns.rules -rw-r--r-- 1 snort snort 32844 Aug 9 15:52 dos.rules -rw-r--r-- 1 root root 6654268 Sep 24 16:09 emerging-all.rules -rw-r--r-- 1 snort snort 1049 May 7 01:53 experimental.rules -rw-r--r-- 1 snort snort 246409 Aug 9 15:52 exploit-kit.rules -rw-r--r-- 1 snort snort 1034 May 7 01:53 exploit.rules -rw-r--r-- 1 snort snort 22053 Jun 11 20:40 file-executable.rules -rw-r--r-- 1 snort snort 124703 Aug 9 15:52 file-flash.rules -rw-r--r-- 1 snort snort 395533 Aug 30 15:34 file-identify.rules -rw-r--r-- 1 snort snort 70258 Aug 9 15:52 file-image.rules -rw-r--r-- 1 snort snort 63459 Aug 9 15:52 file-java.rules -rw-r--r-- 1 snort snort 122133 Aug 30 15:13 file-multimedia.rules -rw-r--r-- 1 snort snort 334808 Aug 9 15:52 file-office.rules -rw-r--r-- 1 snort snort 203381 Aug 12 16:43 file-other.rules -rw-r--r-- 1 snort snort 150815 Aug 9 15:52 file-pdf.rules -rw-r--r-- 1 snort snort 1031 May 7 01:53 finger.rules -rw-r--r-- 1 snort snort 1022 May 7 01:53 ftp.rules -rw-r--r-- 1 snort snort 1040 May 7 01:53 icmp-info.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 icmp.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 imap.rules -rw-r--r-- 1 snort snort 78455 Aug 9 15:52 indicator-compromise.rules -rw-r--r-- 1 snort snort 42237 Aug 9 15:52 indicator-obfuscation.rules -rw-r--r-- 1 snort snort 8558 Aug 9 15:52 indicator-scan.rules -rw-r--r-- 1 snort snort 42033 Aug 9 15:52 indicator-shellcode.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 info.rules -rw-r--r-- 1 snort snort 1479 Aug 27 19:50 local.rules -rw-r--r-- 1 snort snort 0 Aug 21 12:48 log1.txt -rw-r--r-- 1 snort snort 273617 Aug 9 15:52 malware-backdoor.rules -rw-r--r-- 1 snort snort 764460 Aug 12 16:43 malware-cnc.rules -rw-r--r-- 1 snort snort 238347 Aug 9 15:52 malware-other.rules -rw-r--r-- 1 snort snort 56280 Aug 9 15:52 malware-tools.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 misc.rules -rw-r--r-- 1 snort snort 1043 May 7 01:53 multimedia.rules -rw-r--r-- 1 snort snort 1028 May 7 01:53 mysql.rules -rw-r--r-- 1 snort snort 125172 Aug 9 15:52 netbios.rules -rw-r--r-- 1 snort snort 1023 Aug 9 15:52 nntp.rules -rw-r--r-- 1 snort snort 1031 May 7 01:53 oracle.rules -rw-r--r-- 1 snort snort 7136 Jun 11 20:40 os-linux.rules -rw-r--r-- 1 snort snort 38855 Aug 9 15:52 os-mobile.rules -rw-r--r-- 1 snort snort 6733 Aug 9 15:52 os-other.rules -rw-r--r-- 1 snort snort 4585 Jun 11 20:40 os-solaris.rules -rw-r--r-- 1 snort snort 296455 Aug 9 15:52 os-windows.rules -rw-r--r-- 1 snort snort 1040 May 7 01:53 other-ids.rules -rw-r--r-- 1 snort snort 1022 May 7 01:53 p2p.rules -rw-r--r-- 1 snort snort 1052 May 7 01:53 phishing-spam.rules -rw-r--r-- 1 snort snort 3096 Jun 11 20:40 policy-multimedia.rules -rw-r--r-- 1 snort snort 24262 Aug 9 15:52 policy-other.rules -rw-r--r-- 1 snort snort 1031 May 7 01:53 policy.rules -rw-r--r-- 1 snort snort 26204 Jun 11 20:40 policy-social.rules -rw-r--r-- 1 snort snort 63218 Jun 11 20:40 policy-spam.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 pop2.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 pop3.rules -rw-r--r-- 1 snort snort 13558 Aug 9 15:52 protocol-dns.rules -rw-r--r-- 1 snort snort 4514 Jun 11 20:40 protocol-finger.rules -rw-r--r-- 1 snort snort 38378 Aug 9 15:52 protocol-ftp.rules -rw-r--r-- 1 snort snort 30031 Jun 11 20:40 protocol-icmp.rules -rw-r--r-- 1 snort snort 20889 Aug 9 15:52 protocol-imap.rules -rw-r--r-- 1 snort snort 5602 Aug 9 15:52 protocol-nntp.rules -rw-r--r-- 1 snort snort 9060 Jun 11 20:40 protocol-pop.rules -rw-r--r-- 1 snort snort 94898 Aug 9 15:52 protocol-rpc.rules -rw-r--r-- 1 snort snort 71884 Aug 9 15:52 protocol-scada.rules -rw-r--r-- 1 snort snort 5179 Jun 11 20:40 protocol-services.rules -rw-r--r-- 1 snort snort 7923 Aug 9 15:52 protocol-snmp.rules -rw-r--r-- 1 snort snort 10475 Aug 9 15:52 protocol-telnet.rules -rw-r--r-- 1 snort snort 7134 Aug 9 15:52 protocol-tftp.rules -rw-r--r-- 1 snort snort 95118 Aug 9 15:52 protocol-voip.rules -rw-r--r-- 1 snort snort 332932 Jun 11 20:40 pua-adware.rules -rw-r--r-- 1 snort snort 9874 Jun 11 20:40 pua-other.rules -rw-r--r-- 1 snort snort 8203 Jun 11 20:40 pua-p2p.rules -rw-r--r-- 1 snort snort 90768 Jun 11 20:40 pua-toolbars.rules -rw-r--r-- 1 snort snort 1020 Aug 9 15:52 rpc.rules -rw-r--r-- 1 snort snort 1040 May 7 01:53 rservices.rules -rw-r--r-- 1 snort snort 1026 Aug 9 15:52 scada.rules -rw-r--r-- 1 snort snort 1023 Aug 9 15:52 scan.rules -rw-r--r-- 1 snort snort 30254 Aug 9 15:52 server-apache.rules -rw-r--r-- 1 snort snort 72953 Aug 9 15:52 server-iis.rules -rw-r--r-- 1 snort snort 72953 Aug 9 19:35 server-iis.rules.new -rw-r--r-- 1 snort snort 60653 Aug 9 15:52 server-mail.rules -rw-r--r-- 1 snort snort 28734 Jun 11 20:40 server-mssql.rules -rw-r--r-- 1 snort snort 28120 Jun 11 20:40 server-mysql.rules -rw-r--r-- 1 snort snort 233191 Jun 11 20:40 server-oracle.rules -rw-r--r-- 1 snort snort 303084 Aug 12 16:43 server-other.rules -rw-r--r-- 1 snort snort 14023 Aug 9 15:52 server-samba.rules -rw-r--r-- 1 snort snort 547531 Aug 12 16:43 server-webapp.rules -rw-r--r-- 1 snort snort 1040 May 7 01:53 shellcode.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 smtp.rules -rw-r--r-- 1 snort snort 1023 Aug 9 15:52 snmp.rules -rw-r--r-- 1 snort snort 1061 May 7 01:53 specific-threats.rules -rw-r--r-- 1 snort snort 1046 May 7 01:53 spyware-put.rules -rw-r--r-- 1 snort snort 28708 Aug 21 10:54 sql.rules -rw-r--r-- 1 snort snort 1029 Aug 9 15:52 telnet.rules -rw-r--r-- 1 snort snort 1023 Aug 9 15:52 tftp.rules -rw-r--r-- 1 snort snort 1028 May 7 01:53 virus.rules -rw-r--r-- 1 snort snort 1025 May 7 01:53 voip.rules -rw-r--r-- 1 snort snort 19574 Jun 11 20:39 VRT-License.txt -rw-r--r-- 1 snort snort 1046 May 7 01:53 web-activex.rules -rw-r--r-- 1 snort snort 1046 May 7 01:53 web-attacks.rules -rw-r--r-- 1 snort snort 1034 May 7 01:53 web-cgi.rules -rw-r--r-- 1 snort snort 1043 May 7 01:53 web-client.rules -rw-r--r-- 1 snort snort 1055 May 7 01:53 web-coldfusion.rules -rw-r--r-- 1 snort snort 1052 May 7 01:53 web-frontpage.rules -rw-r--r-- 1 snort snort 1034 May 7 01:53 web-iis.rules -rw-r--r-- 1 snort snort 1037 May 7 01:53 web-misc.rules -rw-r--r-- 1 snort snort 1034 May 7 01:53 web-php.rules -rw-r--r-- 1 snort snort 1918 Jun 11 20:40 x11.rules