Snort mailing list archives
multiple port variable fun
From: ryan () mydingo net au
Date: Tue, 03 Jul 2007 14:57:54 +1000
Hey all, My network has http traffic on multiple ports, what is the best way to setup a http_port variable so all relevant rules alerts on multiple ports. I need to setup the equvilant of: var http_ports 80,8082,3001 I know snort does not allow a comma seperated value for ports, just wondering if there is a way to have a port variable that is not a range etc. Cheers Ryan ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- multiple port variable fun ryan (Jul 02)
- Message not available
- Re: multiple port variable fun Ryan Hudson (Jul 03)
- Re: multiple port variable fun Jeffrey Denton (Jul 04)
- Re: multiple port variable fun Frank Knobbe (Jul 24)
- Re: multiple port variable fun Justin Heath (Jul 25)
- Re: multiple port variable fun Ryan Hudson (Jul 03)
- Message not available