April 13th, 2004, 05:04 PM
Admin: I perfectly understand the reasoning for the move. My second email was just to clarify a little the original posting. I have done a search for snort, and - obviously - stumbled across some...
April 12th, 2004, 06:59 PM
My initial message was posted on the antivirus forum, where the question clearly related to the subject of that forum. Reading it again here, where the admin has moved it (this forum), the original...
April 12th, 2004, 06:34 PM
How does one start looking for payload portions uniquely identifying base64 emails, to be able to use them as starting point of snort rules (i.e. what part of a MIME base64 encoded payload would one...