Snort mailing list archives

Quick Pulledpork modifysid question


From: "Lay, James" <james.lay () wincofoods com>
Date: Tue, 19 Jul 2011 14:34:45 -0600

Hey all!

 

So...trying my hand at modifying rules at the pp level...read through
some info online where some folks removed the "\"...will the below fly
like I think it will?

 

12801 "\$HOME_NET" "\$HOME_NET \!25"

 

Thanks.

 

James

------------------------------------------------------------------------------
Magic Quadrant for Content-Aware Data Loss Prevention
Research study explores the data loss prevention market. Includes in-depth
analysis on the changes within the DLP market, and the criteria used to
evaluate the strengths and weaknesses of these DLP solutions.
http://www.accelacomm.com/jaw/sfnl/114/51385063/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please see http://www.snort.org/docs for documentation

Current thread: