[Snort-users] help with writing rule

Document Retention document.retention at ...11827...
Thu Jun 12 16:24:06 EDT 2008


Greetings all,

I need help writing a rule that:

1.Grabs a packet and gets the payload

2. Saves payload in some vairiable and sets flowbits

3. Then compairs the payload with the next packet at a certain depth.

Is this possible ?  Any help is greatly appreciated!

Thanks,

Doc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20080612/494877b4/attachment.html>


More information about the Snort-users mailing list