Snort mailing list archives
HI_CLIENT_WEBROOT_DIR 119:18 rule help
From: Chuck DiRaimondi <charlesd81 () gmail com>
Date: Sun, 14 Oct 2012 06:45:02 -0400
I'm new to Snort and rules in general so I apologize in advance. I've been trying to understand this rule. When would this rule be fired? I don't see a content or similar type keyword in the rule that would look for specific data within the payload and then fire if it meets the criteria. Thanks!
------------------------------------------------------------------------------ Don't let slow site performance ruin your business. Deploy New Relic APM Deploy New Relic app performance management and know exactly what is happening inside your Ruby, Python, PHP, Java, and .NET app Try New Relic at no cost today and get our sweet Data Nerd shirt too! http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- HI_CLIENT_WEBROOT_DIR 119:18 rule help Chuck DiRaimondi (Oct 14)
- Re: HI_CLIENT_WEBROOT_DIR 119:18 rule help Dave Venman (Oct 14)
- Message not available
- Re: HI_CLIENT_WEBROOT_DIR 119:18 rule help Dave Venman (Oct 15)
- Message not available
- Re: HI_CLIENT_WEBROOT_DIR 119:18 rule help Dave Venman (Oct 14)