Re: Fast alert format

[François Désarménien <francois () fdesar net>]

Tue, 16 Oct 2001 14:48:09 -0400
"Ian Melven" <imelven () xtremesoft com> wrote:

> hullo everyone
>
> well, i read enough source to assume that the 
> [number:number:number] stuff in my snort fast alerts
> is the 'generator':snort rule id:rule revision
>
> what are the possible values for the "generator" ?

Look into generator.h

> is the alert format docc'ed anywhere other than
> in the code ? i couldn't really find it in the manual ?

The best up-to-date place to look at is... the sources :-)

F.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users