Re: proper usage of $SHELLCODE_PORTS ?

[Jon Hart <jhart () ccs neu edu>]

> Correct me if I am wrong but I think this would be the syntax,
>
> var SHELLCODE_PORTS ![80,9100,119]
>
> Can anybody provide confirmation?
>
> vjl

That doesn't seem to work for me:


 FATAL ERROR: ERROR ./rules/shellcode.rules (14) => Invalid port: [80,9100,515,119]

Line 14 is the first rule where SHELLCODE_RULES is used.

*shrug*

thanks,

-jon

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users