Snort mailing list archives
RE: SNORT keywork to check TCP window size
From: "Alberto Grazi" <grazi_alberto () hotmail com>
Date: Wed, 12 Sep 2001 16:19:22 +0100
I've actually found something in the changelog which says it is possible to check it but there is no mention at all in the documentation... Can anyone help ? http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/snort/snort/ChangeLog?rev =1.13&content-type=text/vnd.viewcvs-markup /* $Id: ChangeLog,v 1.13 2001/08/15 05:54:35 roesch Exp $ */ [...] 2001-04-19 bmc <bmc () mitre org> [...] * added sp_tcp_win_check. TCP Window Size can be looked now -----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users-admin () lists sourceforge net] On Behalf Of Alberto Grazi Sent: 13 September 2001 00:42 To: snort-users () lists sourceforge net Subject: [Snort-users] SNORT keywork to check TCP window size Hi, does anyone know how to check the window size of a TCP packet in a SNORT rule? I've been looking in the documentation and on the Net but I haven't found it yet... there has to be a way, it's written in the changelog! Any help is appreciated. Regards Alberto Grazi _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- SNORT keywork to check TCP window size Alberto Grazi (Sep 11)
- RE: SNORT keywork to check TCP window size Alberto Grazi (Sep 12)
- Re: SNORT keywork to check TCP window size Phil Wood (Sep 12)
- RE: SNORT keywork to check TCP window size Alberto Grazi (Sep 12)