[Snort-users] query for snort signature writing using if condition

Al Lewis (allewi) allewi at cisco.com
Sun Feb 11 09:58:10 EST 2018


Can you give an example of what you are trying to do?

What condition are you trying to use “if” on?


Albert Lewis
ENGINEER.SOFTWARE ENGINEERING
SOURCEfire, Inc. now part of Cisco
Email: allewi at cisco.com<mailto:allewi at cisco.com>
From: Snort-users <snort-users-bounces at lists.snort.org> on behalf of Ngnr Pu via Snort-users <snort-users at lists.snort.org>
Reply-To: Ngnr Pu <ngnrpu at gmail.com>
Date: Sunday, February 11, 2018 at 6:47 AM
To: "snort-users at lists.snort.org" <snort-users at lists.snort.org>
Subject: [Snort-users] query for snort signature writing using if condition

i want to write a rule based on if condition. Any solution or hint please?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180211/9c9c191c/attachment.html>


More information about the Snort-users mailing list