[Snort-users] Finding the offset or depth in packets

miha rass miha4246 at ...11827...
Mon Jul 8 18:37:40 EDT 2013


I am trying to find a way to identify the offset of a packet so I can have
a snort rule look "x" number of bytes into the packet before triggering on

I am using wireshark, but i can't seem to find if it will let me highlight
a certian byte to see where in the packet that data is.  i also looked in
wireshark to see if I can export just that packet and throw it into a hex

Any help would be appreciated.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130708/aafb7ed0/attachment.html>

More information about the Snort-users mailing list