Hi, Does anybody know if it's possible to create event filters for user-defined TCP_Probe_* signatures? I have a lot of signatures created by pam.tcpprobe.<issueID>.<portN> param. Is event filter configured for that signatures working? Now I'm not sure, because sometimes it seems that filters are working and sometimes not.
Thanks. --- Best regards, Sergey V. Soldatov. Information security department. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
