Snort mailing list archives

Re: Rules Question


From: "Stevo" <checkpoint () ozbergs com>
Date: Tue, 5 Aug 2003 17:34:07 -0700

Also, is there a way to verify the rules once you have created them??
  ----- Original Message ----- 
  From: Stevo 
  To: snort-users () lists sourceforge net 
  Sent: Tuesday, August 05, 2003 5:13 PM
  Subject: [Snort-users] Rules Question


  I'm creating some new rules to use... I'm looking for certain keywords in packets and have got the rule working, but 
I'm interested in seeing more of the Payload... right now I'm just getting the line that includes that keyword...  how 
can I tell ACID to show me 10 lines on either side of the keyword for example??

  Stevo

Current thread: