[Snort-users] tcpdump expressions in a rule

Kevin Timm ktimm at ...1692...
Thu Mar 29 00:53:59 EST 2001


Is it possible to put tcpdump style expressions in a rule to match on
certain things like mss or wscale being set to a certain size?
Thanks
Kevin





More information about the Snort-users mailing list