[Snort-users] Finding the offset or depth in packets

miha rass miha4246 at ...11827...
Mon Jul 8 17:35:50 EDT 2013


Hello,

I am trying to find a way to identify the offset of a packet so I can have
a snort rule look "x" number of bytes into the packet before triggering on
content.

I am using wireshark, but i can't seem to find if it will let me highlight
a certian byte to see where in the packet that data is.  i also looked in
wireshark to see if I can export just that packet and throw it into a hex
editor.

Any help would be appreciated.

thx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130708/c5f33887/attachment.html>


More information about the Snort-users mailing list