Snort mailing list archives
AW: SID Private Number range?
From: "Poppi, Sandro" <Sandro.Poppi () wacker com>
Date: Thu, 28 Mar 2002 16:15:32 +0100
According to Snort User Manual page 24: 2.3.26 Sid The sid keyword is used to identify unique Snort rules. This information allows output plugins to identify rules easily. See Figure 2.23for a usage example. Sid ranges are assigned as follows: <100 Reserved for future use 100-1,000,000 Rules included with the Snort distribution
1,000,000 Used for local rules
Another drink for me ;) HTH, Sandro
Is there a private number range that people can safely use for their own custom rules, when designating an SID number for rules? I have a lot of custom made rules, and do not want to run into any conflicts with the rules that come in the snort.conf. Any preset private range that will be respected? Thanks, Sam _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- AW: SID Private Number range? Poppi, Sandro (Mar 28)
- Re: AW: SID Private Number range? Sam (Mar 28)