JPEG file identify

Description

Detects JPEG image content in transit by its header signature. The rules never alert on their own; they set the file.jpeg marker so downstream inspection rules can condition alerts on a JPEG being present in the session.

References

• snort.org →