Re: HTTP PORTS

[Chris Green <cmg () sourcefire com>]

"Morgan R. Elmore" <Morgan () SEEMAC COM> writes:

> I believe the correct way to specify multiple ports would be:
> var HTTP_PORTS [80,8080]

There are no port lists support right now other than
var HTTP_PORTS 80:8080 to cover the whole range.

The kludge is

var HTTP_PORTS 80
include web-iis.rules
var HTTP_PORTS 8080
include web-iis.rules

> -----Original Message-----
> From: Darrin Powell [mailto:dpowell () lssi net] 
> Sent: Tuesday, February 04, 2003 9:35 AM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] HTTP PORTS
>
>
> Is this the correct way to set HTTP_PORTS?
>
> # Ports you run web servers on
> var HTTP_PORTS 80 8080
>
> Thanks
> Darrin
>
>
>
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by:
> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
> http://www.vasoftware.com _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by:
> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
> http://www.vasoftware.com
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
Chris Green <cmg () sourcefire com>
Warning: time of day goes back, taking countermeasures.



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users