[Snort-sigs] Identifying Non-SSL traffic on port 443

Ray Van Dolson rvandolson at ...3497...
Thu May 20 01:19:00 EDT 2010

I need some pointers on how to create a rule to identify non-SSL
traffic on port 443.

I found this thread[1] from a few years back with some good ideas in
it, but I'm figuring someone out there must have an already working
rule set or something to add to the discussion there.


[1] http://marc.info/?l=snort-sigs&m=115046241125295&w=2

More information about the Snort-sigs mailing list