I am new to snort and I am trying to make a rule that will detect repeating bits in a packet. I set it to offset to the 100th bit and the depth is 105 bits. The problem I am having is I can't figure out how to make it detect a random pattern of bits that repeat. For example FF FF FF FF FF or 21 21 21 21. Is Snort actually capable of doing this, and if so then how? Any information would be much appreciated.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.