[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-users
Subject:    [Snort-users] IP Packet Size
From:       SiNA <sina.rabbani () gmail ! com>
Date:       2016-11-07 23:47:03
Message-ID: CABiB2OPJRVQ2NgqiF=PxQ=_dmcY8K5-Keh=_FhCUUBOPGhsrVA () mail ! gmail ! com
[Download RAW message or body]

Hi,

How can I force a rule to only alert based on the "IP Packet Size"
rather than the IP Packet Payload size?

Thanks,
Sina

--
SiNA
PGP: 0x0B47D56D

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
[prev in list] [next in list] [prev in thread] [next in thread]