Snort mailing list archives
Re: geting this rule to work
From: Jeremy Hoel <jthoel () gmail com>
Date: Thu, 29 Nov 2012 14:08:16 -0700
There you go. Learned something else new today. Thanks! On Nov 29, 2012 1:51 PM, "Marcos Rodriguez" <marcos.e.rodriguez () gmail com> wrote:
On Thu, Nov 29, 2012 at 3:43 PM, Jeremy Hoel <jthoel () gmail com> wrote:You can use udp for traceroute, but i didn't think it was the default, because you would also have to specify a port right?I think it uses port 53 by default now. It used to increment the dest port # by one for each probe, or something.
------------------------------------------------------------------------------ Keep yourself connected to Go Parallel: VERIFY Test and improve your parallel project with help from experts and peers. http://goparallel.sourceforge.net
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- geting this rule to work Akinwale Fasuru (Nov 29)
- Re: geting this rule to work Jeremy Hoel (Nov 29)
- Re: geting this rule to work Giles Coochey (Nov 29)
- Re: geting this rule to work Jeremy Hoel (Nov 29)
- Re: geting this rule to work Marcos Rodriguez (Nov 29)
- Re: geting this rule to work Jeremy Hoel (Nov 29)
- Re: geting this rule to work Giles Coochey (Nov 29)
- Re: geting this rule to work Marcos Rodriguez (Nov 29)
- Re: geting this rule to work waldo kitty (Nov 29)
- Re: geting this rule to work Akinwale Fasuru (Nov 30)
- Re: geting this rule to work JJC (Dec 01)
- Re: geting this rule to work waldo kitty (Dec 01)
- Re: geting this rule to work Jeremy Hoel (Dec 02)
- Re: geting this rule to work Jeremy Hoel (Nov 29)
- <Possible follow-ups>
- Re: geting this rule to work Y M (Nov 29)