Snort mailing list archives

Re: [Emerging-Sigs] Best way to achieve this.


From: Joel Esler <jesler () sourcefire com>
Date: Thu, 2 Dec 2010 21:56:55 -0500

I can put in the feature request through a bug if you want. 

Can you provide me some written use cases?

Sent from my iPad

On Dec 2, 2010, at 7:53 PM, Paul Halliday <paul.halliday () gmail com> wrote:

On Thu, Dec 2, 2010 at 7:23 PM, Joel Esler <jesler () sourcefire com> wrote:
Kevin has it right.


Probably a stupid question but I will try it anyway:

Why can't wildcard ranges be applied through something like a suppress?

Say:

*.p2p !10.*.[228-230].0/24

------------------------------------------------------------------------------
Increase Visibility of Your 3D Game App & Earn a Chance To Win $500!
Tap into the largest installed PC base & get more eyes on your game by
optimizing for Intel(R) Graphics Technology. Get started today with the
Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs.
http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: