I have need of your aid. I must write a rule for Snort that make an alarm in the case in which a packet contains one pattern A and not contains a pattern B at the same time.
I know the "content" options, but it doesn't support the boolean and.
Thank you for yours suggest.
Igor
