[Snort-users] Limewire

Stan Scalsky sscalsk at ...3339...
Wed Sep 5 18:16:01 EDT 2001


> Has anyone captured a Limewire session and developed a Snort rule to
detect
> this specific variant of Gnutella?

I find that some of the agents have a specific User-Agent string, LimeWire
uses "User-Agent: LimeWire" in its html.

-= stan






More information about the Snort-users mailing list