From: yavuz gokirmak <ygokirmak_at_nospam>
Date: Fri May 22 2009 - 07:27:55 GMT To: email@example.com
I am a new user of snort, I have a question about snort usage.
I have a file of pcap data ( read vie tcpdump -r)
Assume we have some rules A,B,C,D and E.
I want to log unrecognized packets, I mean,
Packets which matches none of the A,B,C,D,E rules...
is it possible,
Can I take the inverse of the whole rule to create new rule like " !A and !B
and !C and !D and !E" ?
thanks in advance,
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://www.creativitycat.com