Identifying Non-SSL traffic on port 443

[Ray Van Dolson <rvandolson () esri com>]

I need some pointers on how to create a rule to identify non-SSL
traffic on port 443.

I found this thread[1] from a few years back with some good ideas in
it, but I'm figuring someone out there must have an already working
rule set or something to add to the discussion there.

Thanks,
Ray

[1] http://marc.info/?l=snort-sigs&m=115046241125295&w=2

------------------------------------------------------------------------------

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs