I wish to thank Mr. Metcalf for his kindness at helping me to understand snort rules mechanics. Thanks and good luck. ps: please be around -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-devel/attachments/20101201/ce081db3/attachment-0002.html>