Snort mailing list archives
Re: Fast alert format
From: François Désarménien <francois () fdesar net>
Date: Wed, 17 Oct 2001 10:46:14 +0200
Tue, 16 Oct 2001 14:48:09 -0400 "Ian Melven" <imelven () xtremesoft com> wrote:
hullo everyone well, i read enough source to assume that the [number:number:number] stuff in my snort fast alerts is the 'generator':snort rule id:rule revision what are the possible values for the "generator" ?
Look into generator.h
is the alert format docc'ed anywhere other than in the code ? i couldn't really find it in the manual ?
The best up-to-date place to look at is... the sources :-) F. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Fast alert format Ian Melven (Oct 16)
- Re: Fast alert format François Désarménien (Oct 17)