[Snort-users] SMTP subject tracking

Keith Irvin keithi at ...10493...
Mon Dec 15 07:00:15 EST 2003


    Is there a way to track SMTP messages based on the subject of the
message?  I'm trying to track down email spammers in our organization.
If there is, can someone give me an example of a rule that would trigger on
an SMTP subject?

-Keith Irvin






More information about the Snort-users mailing list