28Ağu
Using dsize:<500 parameter in snort
I am trying to make a rule to alert when downloading a .jpg file less than certain size. I used the parameter dsize:<500.
But it is not alerting when I tried to run a .pcap file containing a jpg less than 500MB.
Did I use the parameter correctly?
