Snort mailing list archives
MSN Chat Rule Help
From: Ricardo Londoño <ricardo () datawan net>
Date: Mon, 2 Dec 2002 15:05:21 -0600
My MSN Chat rule does not seem to be working. I have also tried different variations I found on the web with no luck. Does anyone have a good working MSN Chat rule? My Current Rule: alert tcp $HOME_NET any -> $EXTERNAL_NET 1863 (msg:"CHAT MSN chat access"; flow:to_server,established; content:"text/plain"; depth:100; classtype:misc-activity; sid:540; rev:6;) thanks Ricardo ------------------------------------------------------- This SF.net email is sponsored by: Get the new Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ACID Signature Links problem KyleGinney (Dec 02)
- MSN Chat Rule Help Ricardo Londoño (Dec 02)