Writing a Rule, need help

[Don Cook <deathstar_dood () earthlink net>]

Hi all,

I am trying to write a rule that will alert me when someone in my company accesses a certain message board site...I am 
having trouble getting it granular enough to be effective. Doing it by IP works, but then I get ALL the hits to ALL the 
message boards.

Any thoughts?

dd


-------------------------------------------------------
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users