[Snort-devel] extend rules options to check tcp win size

Brian bmc at ...835...
Tue Jun 24 06:44:01 EDT 2003


On Mon, Jun 23, 2003 at 01:45:08PM +0200, m.stiefenhofer at ...2049... wrote:
> Hase someone ever thought about extending snorts capabilities to check the 
> win size?

The capability is already there.

    window:[!]<window_size>;

-brian




More information about the Snort-devel mailing list