Snort mailing list archives
Variables don't need dollar sign in sig?
From: Mike Cox <mike.cox52 () gmail com>
Date: Thu, 13 Nov 2014 11:21:56 -0500
I recently realized that I had some rules that used an ipvar but without the dollar sign. For example: alert HOME_NET any -> ... instead of: alert $HOME_NET any -> ... The strange thing is, this seems to work fine and the rule alerts as expected. However, I couldn't find anything in the manual about this behavior. Is this normal? In my case I do have this in my conf: ipvar HOME_NET any Thanks! -Mike Cox
------------------------------------------------------------------------------ Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk
_______________________________________________ Snort-devel mailing list Snort-devel () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-devel Archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Variables don't need dollar sign in sig? Mike Cox (Nov 13)