Snort mailing list archives

Question


From: Joe Hdez <moncher76 () yahoo com>
Date: Tue, 8 Apr 2003 16:20:07 -0700 (PDT)


Hi,

Got a question,

I added the rule for the NETBIOS SMB trans2open buffer overflow attempt but it included a field called byte_test that 
it seems to be not recognized by snort 1.9.1.

I´d like to know if that rule would work if I remove that field?

Thanks

Joe



---------------------------------
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more

Current thread: