Snort mailing list archives
Re: AW: SID Private Number range?
From: Sam <sam () neuroflux com>
Date: Thu, 28 Mar 2002 10:35:32 -0500 (EST)
DAMN! I knew I should have RTFM again. ;) Thanks. Enjoy your beer. On Thu, 28 Mar 2002, Poppi, Sandro wrote:
According to Snort User Manual page 24: 2.3.26 Sid The sid keyword is used to identify unique Snort rules. This information allows output plugins to identify rules easily. See Figure 2.23for a usage example. Sid ranges are assigned as follows: <100 Reserved for future use 100-1,000,000 Rules included with the Snort distribution >1,000,000 Used for local rules Another drink for me ;) HTH, SandroIs there a private number range that people can safely use for their own custom rules, when designating an SID number for rules? I have a lot of custom made rules, and do not want to run into any conflicts with the rules that come in the snort.conf. Any preset private range that will be respected? Thanks, Sam _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- AW: SID Private Number range? Poppi, Sandro (Mar 28)
- Re: AW: SID Private Number range? Sam (Mar 28)