application filtering using snort in pfsense netgate

Karthick Moorthy via Snort-users <[email protected]> Tue, 23 Sep 2025 21:44:42 -0700
Newsgroups gmane.comp.security.ids.snort.general
Message-ID <CAPpKzVL=cFeGjcODcWfckXZif-2am39KjuOy7LgFUb8ZTA5o3g@mail.gmail.com>
--===============4832099116447939980==
Content-Type: multipart/alternative; boundary="000000000000b87406063f84b6c5"

--000000000000b87406063f84b6c5
Content-Type: text/plain; charset="UTF-8"

Hi,

I am trying to do application filter using snort, issue is when I tried for
whatsapp and microsoft teams the rule with application ID is not
working properly

Could you please share the available document on config application filter
rule on snort I would like to verify my configuration is correct.


Thank you for your help in advance


Thank you,
KM

-- 
The information contained in this electronic message and any attachments to 
this message are intended for the exclusive use of the addressee(s) and may 
contain proprietary, confidential or privileged information. If you are not 
the intended recipient, you should not disseminate, distribute or copy this 
e-mail. Please notify the sender immediately and destroy all copies of this 
message and any attachments. WARNING: Computer viruses can be transmitted 
via email. The recipient should check this email and any attachments for 
the presence of viruses. The Organisation accepts no liability for any 
damage caused by any virus transmitted by this email. 
www.ishafoundation.org <http://www.ishafoundation.org>

--000000000000b87406063f84b6c5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>I am trying to do application filte=
r using snort, issue is when I tried for whatsapp and microsoft=C2=A0teams =
the rule with application ID is not working=C2=A0properly=C2=A0</div><div><=
br></div><div>Could you please share the available document on config appli=
cation filter rule on snort I would like to verify my configuration is corr=
ect.</div><div><br></div><div><br></div><div>Thank you for your help in adv=
ance=C2=A0</div><div><br></div><div><br></div><div>Thank you,</div><div>KM<=
/div></div>

<br>
<span style=3D"font-family:arial,sans-serif;background-color:white"><font s=
ize=3D"1">The information contained in this electronic message and any atta=
chments to this message are intended for the exclusive use of the addressee=
(s) and may contain proprietary, confidential or privileged information. If=
 you are not the intended recipient, you should not disseminate, distribute=
 or copy this e-mail. Please notify the sender immediately and destroy all =
copies of this message and any attachments. WARNING: Computer viruses can b=
e transmitted via email. The recipient should check this email and any atta=
chments for the presence of viruses. The Organisation accepts no liability =
for any damage caused by any virus transmitted by this email. <a href=3D"ht=
tp://www.ishafoundation.org" target=3D"_blank">www.ishafoundation.org</a></=
font></span>
--000000000000b87406063f84b6c5--

--===============4832099116447939980==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

--===============4832099116447939980==--