[Snort-users] tcpdump expressions in a rule
ktimm at ...1692...
Thu Mar 29 00:53:59 EST 2001
Is it possible to put tcpdump style expressions in a rule to match on
certain things like mss or wscale being set to a certain size?
More information about the Snort-users