Snort mailing list archives
HTTP_INSPECT
From: "Lucia Di Occhi" <saint_lucy () hotmail com>
Date: Fri, 17 Dec 2004 18:29:29 +0000
Is there a way to tell HTTP_INSPECT to alert only on ANY->MYSERVERS like any other good rule? I am getting alerts on connections generating from my network toward ANY and I'd like to only get alerts generating from ANY to MYSERVERS.
thanks. _________________________________________________________________FREE pop-up blocking with the new MSN Toolbar get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users.Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Best detection of Worm Bristol, Gary L. (Dec 16)
- Re: Best detection of Worm Nick Hatch (Dec 16)
- HTTP_INSPECT Lucia Di Occhi (Dec 17)
- Re: HTTP_INSPECT Jeremy Hewlett (Dec 17)
- Message not available
- Re: HTTP_INSPECT Jeremy Hewlett (Dec 17)
- HTTP_INSPECT Lucia Di Occhi (Dec 17)
- Re: Best detection of Worm Nick Hatch (Dec 16)
