Re: port lists for 1.8

[Jeffrey Taylor <jeff () austinblues dyndns org>]

> From the documentation on port numbers, section 2.2.4:



Port numbers may be specified in a number of ways, including "any"
ports, static port definitions, ranges, and by negation. "Any" ports
are a wildcard value, meaning literally any port. Static ports are
indicated by a single port number, such as 111 for portmapper, 23 for
telnet, or 80 for http, etc. Port ranges are indicated with the range
operator ":". The range operator may be applied in a number of ways to
take on different meanings, such as in Figure 2.6.

    log udp any any -> 192.168.1.0/24 1:1024 log udp  

traffic coming from any port and destination ports ranging from 1 to 1024 

HTH,
  Jeffrey

Quoting Ryan Hill <rhill () xypoint com>:
> sorry folks, couldn't find this after a quick search through the docs - can
> someone tell me what the format is for specifying port listings on 1.8.
> from previous discussions, I seem to recall that 80-443 would work, but not
> 80,81,82,83,443 - is this the case for 1.8.6?


-------------------------------------------------------
This sf.net email is sponsored by: Jabber Inc.
Don't miss the IM event of the season | Special offer for OSDN members! 
JabberConf 2002, Aug. 20-22, Keystone, CO http://www.jabberconf.com/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users