[Snort-users] Problems with spp_stream4.

Emilio Mira emial at ...4389...
Sun Jul 14 21:41:02 EDT 2002


I don't know what I'm doing badly.

With "HOME_NET any" and "EXTERNAL_NET any", I'm trying Snort advertises
'hello' string in a telnet session with rule (in telnet.rules):

alert tcp $HOME_NET any -> $EXTERNAL_NET 23 (msg:"TELNET hello"; flags:A+;  
content:"hello"; sid:3712; )



More information about the Snort-users mailing list