Snort mailing list archives
Re: flowbits: netsenum
From: waldo kitty <wkitty42 () windstream net>
Date: Wed, 29 May 2013 19:53:25 -0400
On 5/29/2013 11:23, Joel Esler wrote:
On May 29, 2013, at 10:57 AM, waldo kitty <wkitty42 () windstream net <mailto:wkitty42 () windstream net>> wrote:there is no check rule in the *.rules files for flowbits: netsenum…It's checked in 24007.
my mistake... i was trying to ensure that each report was uniform in style and missed that :(
additionally, both existing rules' MSG are identical... one should speak of "to client" and the other "to server" in the MSG for clarity??The "set" rule is noalert. You'll never see it alert.
true but perhaps someone sets them to show an alert? ;) -- NOTE: No off-list assistance is given without prior approval. Please keep mailing list traffic on the list unless private contact is specifically requested and granted. ------------------------------------------------------------------------------ Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET Get 100% visibility into your production application - at no cost. Code-level diagnostics for performance bottlenecks with <2% overhead Download for free and get started troubleshooting in minutes. http://p.sf.net/sfu/appdyn_d2d_ap1 _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- flowbits: netsenum waldo kitty (May 29)
- Re: flowbits: netsenum Joel Esler (May 29)
- Re: flowbits: netsenum waldo kitty (May 29)
- Re: flowbits: netsenum Joel Esler (May 30)
- Re: flowbits: netsenum waldo kitty (May 30)
- Re: flowbits: netsenum Joel Esler (May 30)
- Re: flowbits: netsenum waldo kitty (May 30)
- Re: flowbits: netsenum Joel Esler (May 30)
- Re: flowbits: netsenum waldo kitty (May 30)
- Re: flowbits: netsenum Joel Esler (May 30)
- Re: flowbits: netsenum waldo kitty (May 29)
- Re: flowbits: netsenum Joel Esler (May 30)
- Re: flowbits: netsenum waldo kitty (May 30)
- Re: flowbits: netsenum Joel Esler (May 31)
- Re: flowbits: netsenum Joel Esler (May 29)