Snort mailing list archives
How to match the nth packet of a connection?
From: Konstantinos Agouros <elwood () agouros de>
Date: Mon, 23 Jun 2008 20:12:48 +0200
Hi, is there a simple way to match a pattern in say the 3rd packet of a connection. seq and ack can not be used since they are absolute, and I didn't get it from the documentation of stream5. Any hints welcome. Regards, Konstantin -- Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood () agouros de Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185 ---------------------------------------------------------------------------- "Captain, this ship will not survive the forming of the cosmos." B'Elana Torres ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How to match the nth packet of a connection? Konstantinos Agouros (Jun 23)
- Re: How to match the nth packet of a connection? JJ Cummings (Jun 23)