Snort mailing list archives

Re: Rule 17494


From: JJC <cummingsj () gmail com>
Date: Fri, 1 Oct 2010 14:40:58 -0600

Only required in GID:3 stub rules ;-)

On Fri, Oct 1, 2010 at 2:35 PM, waldo kitty <wkitty42 () windstream net> wrote:

On 10/1/2010 16:23, JJC wrote:
As a matter of clarity... there are a number of distinct differences
between a
GID:3 stub rule and a GID:1 regular rule.

thanks for that... i did actually look for a GID:3 entry but not the soid
one...
i wasn't sure that the GID was even necessary as i've never seen it used
/in/
rules until a few very recently...


------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread: