[Snort-users] rule for Yahoo or Hotmail messengers

Ronneil Camara ronneilc at ...4042...
Sun Jun 16 23:12:01 EDT 2002


Does anyone have a rule to detect logins to yahoo or hotmail messengers
and if using port 80?

Adding a rule based on destination address is easy. But I was hoping
that someone has already created a rule based on a sniffed packet
of yahoo or hotmail traffic headers. (Sorta content filtering approach)

Thanks in advance.

Neil




More information about the Snort-users mailing list