okay ... i decided to try them both ( the rule you posted and snort) to see ... ( one at a time :-) ) i just installed snort but i am stuck in the manual right now ... if it happens to have a snort conf file for me ... i will be more than delighted... i hope i'm not becoming anoying ... please tell me if that's the case. thanks again, Octavian DANILA
