Snort mailing list archives
wildcards in rules?
From: "Sheahan, Paul" <Paul.Sheahan () priceline com>
Date: Wed, 26 May 2004 14:07:52 -0400
I'm looking to use Snort to find a string of numbers that begin with a known group of numbers, but end with unknown numbers. Example: I want Snort to alert if it sees a number like 8976**** in a packet where **** can be any numbers. Can this be done with Snort? I couldn't find much on wildcards but did read in a few places that Snort has limited wildcard support. Thanks, Paul
Current thread:
- wildcards in rules? Sheahan, Paul (May 26)
- Message not available
- Re: wildcards in rules? Matt Kettler (May 26)
- Message not available