[Snort-users] Only Smtp traffic

Chris Green cmg at ...1935...
Thu Apr 24 05:30:04 EDT 2003


Sh J <shay_work at ...131...> writes:

> 1.  (*) text/plain ( ) text/html
>
> Hello u all, I need to check only smtp traffic.Does anybody have a
> good idea how doing it without any mistakes??Any suggestion will do
> good. Thanks, John
>

add

snort <args> tcp and port 25

to just watch SMTP
-- 
Chris Green <cmg at ...1935...>
Fame may be fleeting but obscurity is forever.




More information about the Snort-users mailing list