Snort mailing list archives
Re: Broken config directive? or just me?
From: Matt Kettler <mkettler () evi-inc com>
Date: Tue, 29 Apr 2003 20:08:07 -0400
At 06:47 PM 4/29/2003 -0400, Sam Evans wrote:
Per the Snort 2.0.0 manual it says that this should be a valid config directive in your snort.conf : config disable_tcpopt_ttcp_alerts
It appears to be a copy-paste typo. some grep output: src/parser.c: else if(!strcasecmp(config, "disable_ttcp_alerts"))So that really should be "config disable_ttcp_alerts" to actually do what the docs claim that "disable_tcpopt_ttcp_alerts " does. Also the word "options" should be dropped from the description. TCP options and T/TCP are totally separate things.
The docs should be updated to reflect the correct name :http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.1.3
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- porno rules Bryan Irvine (Apr 29)
- Re: porno rules Matt Kettler (Apr 29)
- Re: porno rules Bryan Irvine (Apr 29)
- Broken config directive? or just me? Sam Evans (Apr 29)
- Re: Broken config directive? or just me? Matt Kettler (Apr 29)
- Re: Broken config directive? or just me? Chris Green (Apr 30)
- Re: porno rules Bryan Irvine (Apr 29)
- Re: porno rules Matt Kettler (Apr 29)
- Re: porno rules Matt Kettler (Apr 29)
- <Possible follow-ups>
- Re: porno rules Neil Dickey (Apr 29)
- Re: porno rules Matt Kettler (Apr 29)