[Snort-users] Re: [Snort-sigs] PCRE for SS#'s

Jon Baer security at ...9153...
Tue Sep 21 10:18:05 EDT 2004


Ive actually set this one up with FlexResp2 to block my wife's credit 
card #'s outgoing @ the gateway :-)

Evil I know but works pretty nicely .. and not mention big time money 
saver .. great use of Snort eh?

- Jon

> #alert tcp any any -> any any (msg:"BLEEDING-EDGE SSN Detected in Clear 
> Text"; pcre:"/\b[0-9]{3}-[0-9]{2}-[0-9]
> {4}\b/"; sid:2001328; rev:1;)
> 




More information about the Snort-users mailing list