Snort mailing list archives
question
From: Joe Hdez <moncher76 () yahoo com>
Date: Tue, 8 Apr 2003 14:51:13 -0700 (PDT)
Hi, Got a question, I added the rule for the NETBIOS SMB trans2open buffer overflow attempt but it included a field called byte_test that it seems to be not recognized by snort 1.9.1. I´d like to know if that rule would work if I remove that field? Thanks Joe --------------------------------- Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more
Current thread:
- question Joe Hdez (Apr 08)
- <Possible follow-ups>
- Question Joe Hdez (Apr 08)
- Question Joe Hdez (Apr 11)
- Re: Question Brian (Apr 14)
- Question Joe Hdez (May 13)
- question Eric Garnel (May 26)
- Re: question james (May 26)
- Question Ryan Vennell (Jun 03)
- Re: Question Erek Adams (Jun 03)
- Re: Question Edin Dizdarevic (Jun 03)
- Re: Question Joerg Weber (Jun 03)
(Thread continues...)