IEEE/ICACT20240269 Slide.15        [Big Slide]       Oral Presentation
A PCRE Snort rule will be like the below graph. First, we have action, which tells Snort what to do when the rule matches, and then the rule protocol describes what the rule focuses on. Source IP, Source port, Destination IP, and Destination port are used to assign the IP and port we can send and get the packet. Next, shown in the table, you can see the details of the rule option. The most important one is PCRE; we generate the regular expression and fill it into the space to represent the content of each cluster.

[Go to Next Slide]
Select Voice: