hi there, in order to build up a signature that checks -all- packets for a certain string and sends one or some of the responses available, i studied the "network sensor 7.0 policy guide". all i could find there was the creation of signatures within a given context (e.g. "url_data", "filename" ...). i experimented with the options given there - but none of them resulted in what i was looking for.
does anyone out there know how to build such a custom-signature or how to create a context like "raw_ip_packet" or similar - or where this is described. as i am quite new to realsecure i maybe didn't find it in the docs but i have the impression that realsecure doesn't allow to do what i want to ?! tnx peter _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
