[Snort-users] other variable

Chris Green cmg at ...671...
Fri Mar 2 20:24:06 EST 2001

"Stefan Dens" <Stefan.Dens at ...1469...> writes:

> Hi,
> Is it possible to define a rule that checks if the source and destination
> address is the same in a packet?

Not out of the box.  It wouldn't be hard to make a quick sp_same.c
check but others might have a better idea for a general purpose
solution to this. 
Chris Green <cmg at ...671...>
Life is a series of rude awakenings.
                -- R.V. Winkle

More information about the Snort-users mailing list