Snort detect file download

Find centralized, trusted content and collaborate around the technologies you use most. Connect and share knowledge within a single location that is structured and easy to search. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Collectives on Stack Overflow. Learn more. Asked 4 years, 7 months ago. Active 4 years, 7 months ago. Viewed 1k times. Improve this question. John Doe John Doe 3 2 2 bronze badges.

That will format selected text as code. Or hard way - manually add 4 spaces before each line. Add a comment. Active Oldest Votes. Improve this answer. Here is my rule:. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Collectives on Stack Overflow. Learn more. Asked 3 years, 7 months ago. Active 3 years, 7 months ago. Viewed times. Can everybody help me to find out the problem? Thank you. Improve this question. Leetm Leetm 1 2 2 bronze badges.

Do you have a rule error? Check 'sid ; ' — Mr. Sorry, I lack ";" when posting to here, It existed in my rule. The Snort is run successfully in my device. Try test without content.

And compare test with content to test without content. It is easy to get an answer if show the log when snort has finished running. I tested this case. It mean the snort does not detect download file. It just detect some verification package.