Wireshark’s little known Snort post-dissector
Guest Post: Did you know you can use Wireshark to find which specific packet triggered a Snort rule within a few seconds?
| CARVIEW |
Select Language
HTTP/2 200
date: Mon, 14 Jul 2025 19:53:54 GMT
content-type: text/html; charset=UTF-8
content-length: 36721
x-xss-protection: 1; mode=block
referrer-policy: no-referrer, same-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.apnic.net
cf-edge-cache: cache,platform=wordpress
link: ; rel="alternate"; title="JSON"; type="application/json"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1933
strict-transport-security: max-age=15552000; preload
last-modified: Mon, 14 Jul 2025 19:53:54 GMT
cf-cache-status: MISS
expires: Mon, 14 Jul 2025 20:53:54 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
access-control-allow-headers: cache-control, pragma, user-agent
access-control-allow-methods: GET, OPTIONS
server: cloudflare
cf-ray: 95f39192bd6cb22e-BLR
David Burkett, Author at APNIC Blog
Skip to content
