[Snort-users] other variable

Chris Green cmg at ...671...
Fri Mar 2 20:24:06 EST 2001


"Stefan Dens" <Stefan.Dens at ...1469...> writes:

> Hi,
> 
> Is it possible to define a rule that checks if the source and destination
> address is the same in a packet?

Not out of the box.  It wouldn't be hard to make a quick sp_same.c
check but others might have a better idea for a general purpose
solution to this. 
-- 
Chris Green <cmg at ...671...>
Life is a series of rude awakenings.
                -- R.V. Winkle




More information about the Snort-users mailing list