[Snort-users] Writing a Rule, need help

Don Cook deathstar_dood at ...741...
Tue Jun 10 13:40:12 EDT 2003


Hi all,

I am trying to write a rule that will alert me when someone in my company accesses a certain message board site...I am having trouble getting it granular enough to be effective. Doing it by IP works, but then I get ALL the hits to ALL the message boards.

Any thoughts?

dd




More information about the Snort-users mailing list