[Snort-users] pcaps for triggering rules

Pratik Narang pratik.cse.bits at ...11827...
Fri Aug 24 02:26:58 EDT 2012


Dear Snort users,

A good deal of Snort rules do a 'content' check.
Can I use some utility so that I may be able to craft or tamper
packets just to suit them to trigger Snort rules of my choice?
Essentially, I guess, I am asking if I can create sample pcaps or
modify actual pcap captures which will trigger certain rules.




More information about the Snort-users mailing list