Snort mailing list archives

snort and email

From: "Nosnos" <nosnos94 () wanadoo fr>
Date: Fri, 7 Nov 2003 12:07:14 +0100

Hi,

I want to know if it is possible to write a rules that can store all email sender (@) and the @ email of the receiver ?

Somethink like that :

toto () free com          ->        tata () dial com
arnold () wanadoo com          ->        jack () aol com 
john () tele2 com          ->        tata () dial com

thx a lot

Current thread:

snort and email Nosnos (Nov 07)