[Snort-users] Cheking content for all zeros
Salim at ...2360...
Thu Jun 21 11:12:30 EDT 2001
I am trying to devlelop a rule that checks the payload of an ICMP packet
for an all zero content (nothing but zeros in the content). I haven't
had a luck finding a way doing it. Any ideas would be greatly
appreciated. Execuse my ignorance if this question has been asked
before. I searched the archives to no avail (it might be something that
I did wrong searching).
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users