Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Rules » Rule to get jabber not to send attachements

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Rule to get jabber not to send attachements


Posted by julesd on April 14, 2005 03:20:14

Hey there,

I am pretty new to snort. I am deploying it and it works pretty ok. My mates around have asked me to create a rule to be notified is a jabber client tries to send a windows .exe files ...

I've used tcpdump to get more on this, the log is there http://cjoint.com/?eomYVQuGVw

Can anybody help me? or point me to an URL having details on it?

Thanks,

Jules
site feedback | Terms of Use | Privacy Policy | forum archives ©2008 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.