# netsniff-ng rule file # rule: ip and port 143 or ip and port 220 or ip and port 993 { 0x28, 0, 0, 0x0000000c }, { 0x15, 0, 14, 0x00000800 }, { 0x30, 0, 0, 0x00000017 }, { 0x15, 2, 0, 0x00000084 }, { 0x15, 1, 0, 0x00000006 }, { 0x15, 0, 10, 0x00000011 }, { 0x28, 0, 0, 0x00000014 }, { 0x45, 8, 0, 0x00001fff }, { 0xb1, 0, 0, 0x0000000e }, { 0x48, 0, 0, 0x0000000e }, { 0x15, 2, 0, 0x0000008f }, { 0x15, 1, 0, 0x000000dc }, { 0x15, 2, 0, 0x000003e1 }, { 0x48, 0, 0, 0x00000010 }, { 0x15, 0, 1, 0x000003e1 }, { 0x6, 0, 0, 0xFFFFFFFF }, { 0x6, 0, 0, 0x00000000 },