Trillian rules

[Joe Lawson <jlawson () financeware com>]

I'm also interested in a rule to detect Trillian users.  Has anyone found a
rule set that works?

TIA,

Joe Lawson

-----Original Message-----
From: Kevin L Pawloski [mailto:kpawloski () juno com]
Sent: Tuesday, September 24, 2002 1:54 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Trillian / AIM Rules


Hey Guys,

I know we have rules in Snort from AIM but does this also pickup AIM
users via Trillian or does it use it's own protocol or gateway?

Thanks!

Kevin