Snort mailing list archives
RE: aim rule
From: Joe Lawson <jlawson () financeware com>
Date: Tue, 15 Jul 2003 19:41:33 -0400
Slightly OT: http://www.aimsniff.com/ -----Original Message----- From: Bryan Irvine [mailto:bryan.irvine () kingcountyjournal com] Sent: Tuesday, July 15, 2003 6:36 PM To: snort-users () lists sourceforge net Subject: [Snort-users] aim rule What's the best way to capture both sides of an AIM session? I'm assuming I need to change flow to also include to server...? Do I need to make a seperate rule for that? --Bryan ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here: http://www.vmware.com/wl/offer/345/0 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- aim rule Bryan Irvine (Jul 15)
- <Possible follow-ups>
- RE: aim rule Joe Lawson (Jul 15)