<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Uploading own snort rules in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/uploading-own-snort-rules/m-p/3219350#M1041496</link>
    <description>&lt;P&gt;Copied the rule wrong onto here, the rule is:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;alert tcp any any -&amp;gt; any any (msg:"Malicious SSL 01 Detected"; content:"|17 03 01 00 08|"; pcre:"/\x17\x03\x01\x00\x08.{4}\x04\x88\x4d\x76/"; rev:1; sid:9999998;)&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Mon, 20 Nov 2017 09:45:09 GMT</pubDate>
    <dc:creator>danlawrance1</dc:creator>
    <dc:date>2017-11-20T09:45:09Z</dc:date>
    <item>
      <title>Uploading own snort rules</title>
      <link>https://community.cisco.com/t5/network-security/uploading-own-snort-rules/m-p/3219346#M1041495</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I have a requirement to upload the below snort rule to my sourcefire platform:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;any any -&amp;gt; any any (msg:"Malicious SSL 01 Detected"; content:"17 03 01 00 08|"; pcre:/\x17\x03\x01\x00\x08.{4}\x04\x88\x4d\x76/"; sid:9999998;)&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;However I keep getting an error message that I cannot seem to fix, I have attached the error.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Snort.PNG" style="width: 999px;"&gt;&lt;img src="https://community.cisco.com/t5/image/serverpage/image-id/3617iDCEF6B61FF9042EC/image-size/large?v=v2&amp;amp;px=999" role="button" title="Snort.PNG" alt="Snort.PNG" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 14:47:19 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/uploading-own-snort-rules/m-p/3219346#M1041495</guid>
      <dc:creator>danlawrance1</dc:creator>
      <dc:date>2020-02-21T14:47:19Z</dc:date>
    </item>
    <item>
      <title>Re: Uploading own snort rules</title>
      <link>https://community.cisco.com/t5/network-security/uploading-own-snort-rules/m-p/3219350#M1041496</link>
      <description>&lt;P&gt;Copied the rule wrong onto here, the rule is:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;alert tcp any any -&amp;gt; any any (msg:"Malicious SSL 01 Detected"; content:"|17 03 01 00 08|"; pcre:"/\x17\x03\x01\x00\x08.{4}\x04\x88\x4d\x76/"; rev:1; sid:9999998;)&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Mon, 20 Nov 2017 09:45:09 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/uploading-own-snort-rules/m-p/3219350#M1041496</guid>
      <dc:creator>danlawrance1</dc:creator>
      <dc:date>2017-11-20T09:45:09Z</dc:date>
    </item>
  </channel>
</rss>

