Newbie question

["Jhumri Tilayia" <tilayia () hotmail com>]

Well, I assume that because it's a Network IDS, it sniffs packets. Will it 
let me (for example) write a rule that looks for certain HTTP requests, 
without specifying the whole IP packet (i.e. can it intelligently decode the 
protocol stack?). Since with TCP, a given request could be split across 
multiple packets, can it decode a whole stream (like Ethereal does)?

Thanks.

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users