[Snort-users] Help

Semerjian, Ohanes Semerjian.Ohanes at ...4899...
Tue Jan 21 20:03:03 EST 2003

There is another way of achieving ur goal and that is by writing a rule
something like

alert tcp employee_IP_address any -> dest_IP 25 (msg:"whatever u whant";)

Best Regards

Ohanes Semerjian

-----Original Message-----
From: Guru Cumarasamy [mailto:gcumarasamy at ...8044...]
Sent: Tuesday, 21 January 2003 4:00 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Help

Is it possible to re-construct TCP packets in snort? for example my employer
wants to know all smtp communication between an employee and an outside
user, can I go and re-construct all TCP port 25 traffic from the snort log.
I am running snort with the -b option.

Thanks in advance

This SF.net email is sponsored by: Scholarships for Techies!
Can't afford IT training? All 2003 ictp students receive scholarships.
Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030121/192d9d41/attachment.html>

More information about the Snort-users mailing list