[Snort-users] HI_CLIENT_WEBROOT_DIR 119:18 rule help

Chuck DiRaimondi charlesd81 at ...11827...
Sun Oct 14 06:45:02 EDT 2012


I'm new to Snort and rules in general so I apologize in advance. I've been
trying to understand this rule. When would this rule be fired? I don't see
a content or similar type keyword in the rule that would look for specific
data within the payload and then fire if it meets the criteria. Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20121014/2de36a27/attachment.html>


More information about the Snort-users mailing list