Snort mailing list archives
disabled flowbits?
From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 19 Aug 2010 13:44:23 -0400
can someone please explain why these broken SIDs are not also disabled when the required flowbit setting SID is disabled?? WARNING: SID 13865 depends on flowbit "http.bmp" which is set in INACTIVE SID 16205 (SID 13865 is broken unless you also enable SID 16205). WARNING: SID 13712 depends on flowbit "tlsv1.client_hello.request" which is set in INACTIVE SID 3059 (SID 13712 is broken unless you also enable SID 3059). WARNING: SID 13711 depends on flowbit "tlsv1.client_hello.request" which is set in INACTIVE SID 3059 (SID 13711 is broken unless you also enable SID 3059). WARNING: SID 13714 depends on flowbit "tlsv1.client_hello.request" which is set in INACTIVE SID 3059 (SID 13714 is broken unless you also enable SID 3059). WARNING: SID 13710 depends on flowbit "tlsv1.client_hello.request" which is set in INACTIVE SID 3059 (SID 13710 is broken unless you also enable SID 3059). WARNING: SID 13585 depends on flowbit "csv.download" which is set in INACTIVE SID 13584 (SID 13585 is broken unless you also enable SID 13584). WARNING: SID 13713 depends on flowbit "tlsv1.client_hello.request" which is set in INACTIVE SID 3059 (SID 13713 is broken unless you also enable SID 3059). ------------------------------------------------------------------------------ This SF.net email is sponsored by Make an app they can't live without Enter the BlackBerry Developer Challenge http://p.sf.net/sfu/RIM-dev2dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- disabled flowbits? waldo kitty (Aug 19)
- Re: disabled flowbits? Russ Combs (Aug 26)
- Re: disabled flowbits? JJ Cummings (Aug 26)
- Re: disabled flowbits? waldo kitty (Aug 26)
- Re: disabled flowbits? waldo kitty (Aug 26)
- Re: disabled flowbits? JJ Cummings (Aug 26)
- Re: disabled flowbits? Russ Combs (Aug 26)