Snort mailing list archives

ICQ Rule


From: "Derrick Lichti" <dlichti () mitra com>
Date: Tue, 29 Oct 2002 13:59:27 -0500

Hi All;
 
I'm looking for a rule that would grab any packets from a client using ICQ. Does anybody know of any unique information 
that lies in ICQ message packets? Unfortunately, I don't have a method of testing this myself or else I would have grab 
packets and looked...
 
Thanks!
Derrick

Current thread: