Signature ID of an application
-
To be able to block an application like openvpn traffic, a signature id openvpn is required on the snort custom rule.
The question is, what if the signature is not yet available on the OpenAppID. For example, ultrasurf. I believe ultrasurf is not on the OpenAppID and has no appid for it.
Can we ask how to know or get the signature of the application so that we can use it on the snort custom rule. Thank you.
-
no one knows regarding this ?
-
This is a question you should direct to the Snort mailing list. I don't have the URL, but you should be able to quickly find it on Google. I know there is one.
Bill
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.