Need help with a rule

["Sheahan, Paul (PCLN-NW)" <Paul.Sheahan () priceline com>]

Hello,

I'm looking to create a rule that looks for content such as the word
"twenty", but don't want to the rule to trip when the content is
"twentyone", "twentytwo" etc.

Does anyone have a recommendation on how to create a rule to guarantee that
only "twenty" will be alerted on, and all other combinations of the word
"twenty" will not?

Thanks!

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users