[Snort-users] SNORT keywork to check TCP window size

Alberto Grazi grazi_alberto at ...125...
Wed Sep 12 08:20:02 EDT 2001

I've actually found something in the changelog which says it is possible
to check it but there is no mention at all in the documentation... Can
anyone help ?


/* $Id: ChangeLog,v 1.13 2001/08/15 05:54:35 roesch Exp $ */

2001-04-19 bmc <bmc at ...312...>
    * added sp_tcp_win_check.  TCP Window Size can be looked now 

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Alberto
Sent: 13 September 2001 00:42
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] SNORT keywork to check TCP window size

does anyone know how to check the window size of a TCP packet in a SNORT
I've been looking in the documentation and on the Net but I haven't
found it yet... there has to be a way, it's written in the changelog!

Any help is appreciated.
Alberto Grazi

More information about the Snort-users mailing list