Snort mailing list archives

How to match the nth packet of a connection?


From: Konstantinos Agouros <elwood () agouros de>
Date: Mon, 23 Jun 2008 20:12:48 +0200

Hi,

is there a simple way to match a pattern in say the 3rd packet of a
connection. seq and ack can not be used since they are absolute, and I
didn't get it from the documentation of stream5. Any hints welcome.

Regards,

Konstantin
-- 
Dipl-Inf. Konstantin Agouros aka Elwood Blues. Internet: elwood () agouros de
Otkerstr. 28, 81547 Muenchen, Germany. Tel +49 89 69370185
----------------------------------------------------------------------------
"Captain, this ship will not survive the forming of the cosmos." B'Elana Torres

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: