Snort mailing list archives
Question about snort rules
From: Fernando Villegas Acevedo <fvillegasacevedo () gmail com>
Date: Mon, 7 Oct 2013 17:22:28 -0300
Hi, I need to know if is possible to create rules with conditionality temporary or quantity. For example, "if I receive more than one package 'A' in less than 5 seconds" or "if I receive more than 10 packages 'A' to so ..." I'll wait your answer, thank you for your time. regards! -- Atentamente, *Fernando Antonio Villegas Acevedo* Estudiante IngenierÃa Civil en Informática y Telecomunicaciones *Universidad Diego Portales*
------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Question about snort rules Fernando Villegas (Oct 07)
- Re: Question about snort rules Joel Esler (Oct 07)
- Re: Question about snort rules Joel Esler (Oct 07)
- <Possible follow-ups>
- Question about snort rules Fernando Villegas Acevedo (Oct 11)
- Fwd: Question about snort rules Fernando Villegas Acevedo (Oct 11)
- Re: Question about snort rules Joel Esler (Oct 07)