[Snort-users] How to match the nth packet of a connection?

Konstantinos Agouros elwood at ...14371...
Mon Jun 23 14:12:48 EDT 2008


is there a simple way to match a pattern in say the 3rd packet of a
connection. seq and ack can not be used since they are absolute, and I
didn't get it from the documentation of stream5. Any hints welcome.


Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood at ...14371...
Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185
"Captain, this ship will not survive the forming of the cosmos." B'Elana Torres

More information about the Snort-users mailing list