Snort mailing list archives
Need help with a rule
From: "Sheahan, Paul (PCLN-NW)" <Paul.Sheahan () priceline com>
Date: Tue, 9 Apr 2002 17:46:36 -0400
Hello, I'm looking to create a rule that looks for content such as the word "twenty", but don't want to the rule to trip when the content is "twentyone", "twentytwo" etc. Does anyone have a recommendation on how to create a rule to guarantee that only "twenty" will be alerted on, and all other combinations of the word "twenty" will not? Thanks! _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Need help with a rule Sheahan, Paul (PCLN-NW) (Apr 09)
- Re: Need help with a rule Ryan Russell (Apr 09)
- <Possible follow-ups>
- RE: Need help with a rule Sheahan, Paul (PCLN-NW) (Apr 09)
- RE: Need help with a rule Ryan Russell (Apr 09)
- Re: Need help with a rule Andreas Östling (Apr 10)
- RE: Need help with a rule Estes, Matt CPR / FCBS (Apr 10)