Cybersecurity Fundamentals- IDS Basics guided exercise

Career Paths IT and Cybersecurity Foundations
1

Hi everyone,

I’m currently working through the Cybersecurity Fundamentals course and I’m stuck on the guided exercise for IDS basics.

In this lab, we analyze .pcap files with Snort and answer questions about alerts. Specifically, I’m having trouble with these:

  1. How many Snort alerts does the ping to the Windows server generate?
  2. How many “Insecure Web Server Detected” alerts are found in the apple.pcap file?
  3. How many “FTP Server Detected” alerts are found in the apple.pcap file?

I’ve tried running Snort on the pcap files and checking the output, but my counts don’t seem to match the expected answers in the exercise.

2

Can you show us the commands you are trying an the output of those commands?