[Snort-users] SMTP subject tracking

Keith Irvin keithi at ...10493...
Mon Dec 15 07:00:15 EST 2003

    Is there a way to track SMTP messages based on the subject of the
message?  I'm trying to track down email spammers in our organization.
If there is, can someone give me an example of a rule that would trigger on
an SMTP subject?

-Keith Irvin

More information about the Snort-users mailing list