[Snort-sigs] Look for attached files?

From: Magnus Larsson <magnus.larsson(at)protexion.se>
Date: Sun May 25 2003 - 06:23:51 EDT

Hi!

Newbe question:

How do I make a rule to trig when a mail with a certan filename attached to it passes by? What does the "distance" in the rules mean?

Best Regards,

Magnus

---

This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Sun May 25 08:34:38 2003