showing payload

[hans <rosa.schwein () ma yer at>]

hi all 

base gives the possibility to show the payload. 
if my rule looks for example for "hello" 
and this is the only word in this frame 
the information ist very poor. 

is there a way to show some frames befor 
and after this one, or maybe the whole tcp-stream.

best regards 
hans 

-- 



-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.
Get your fingers limbered up and give it your best shot. 4 great events, 4
opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users