[Snort-users] Range values for TTL

Tan Chee Leong tcleong at ...1397...
Sun May 6 13:08:56 EDT 2001


Hi,

A question about rule-making.  It doesn't seem possible to set a range of
TTL values to check.  Did I miss out something?  If it is really not
possible, can it be considered in the next version?  This may be very
helpful in identifying the platform of the intruder.

Pardon me if I have been ignorant in the first place.

Cheers,
Chee Leong





More information about the Snort-users mailing list