[Snort-users] BPF filters for the intimidated

Paul Schmehl pauls at ...6838...
Fri Jul 23 11:16:19 EDT 2004


Does anyone know a good source for a tutorial on BFP filters?  Reading the 
man page has me crossing my eyes and growning.

I want to capture udp packets on port 53 to one host, including the entire 
payload.  I've figured out the hex address for the host, but the rest 
escapes me.

Paul Schmehl (pauls at ...6838...)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/ir/security/




More information about the Snort-users mailing list