Snort mailing list archives

Re: [Snort-user] dynamic variable for content match


From: waldo kitty <wkitty42 () windstream net>
Date: Wed, 28 Jan 2015 19:52:16 -0500

On 1/27/2015 11:35 AM, zT wrote:
i don't understand what do you mean????

you said that you wanted to enter a string at the command line and have a rule 
in snort detect that string in the network traffic... Al asked you to clarify 
and listed his understanding of what you wanted to do... you came back and said 
that was not the way you wanted to do it... so i asked you to be more explicit 
and tell us how you do want to do it... we're still waiting on your explanation 
of what you desire ;)


On 1/27/15, waldo kitty <wkitty42 () windstream net> wrote:
On 1/26/2015 3:42 PM, zT wrote:
tnx for your suggest but i don't want to do in this way. tnx any way :)

then you need to be much much clearer in what you want to do...

you either write and use static rules or you develop some sort of dynamic
rule that has some sort of command line interface...


-- 
  NOTE: No off-list assistance is given without prior approval.
        Please *keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.

------------------------------------------------------------------------------
Dive into the World of Parallel Programming. The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: