http_inspect_server question

[Jason Wallace <jason.r.wallace () gmail com>]

Hi,

I'm currently using snort-2.8.4-rc1.

Is it valid to have multiple profiles for the same IP but different ports?

preprocessor http_inspect_server: server 192.168.50.10 profile iis ports { 80 }

And then right below it do...

preprocessor http_inspect_server: server 192.168.50.10 profile all
ports { 8080 }


I have a couple of servers running IIS on 80 that also host web based
apps on other ports. I'd like to stick to the IIS profile on 80 and
use the all profile for these other apps.


thx,
Wally

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users