I\'m trying to setup snort rules and am trying to get an alert on any packets from .128 to the victim containing "shadow". I\'m just having trouble finding docume