Snort mailing list archives

Re: New IP Range for AIM_SERVERS

From: Frank Knobbe <frank () knobbe us>
Date: Thu, 13 Jan 2005 15:44:37 -0600

On Thu, 2005-01-13 at 16:34 -0500, Brian wrote:

It invalidates the rules for AOL users, many of whom use Snort.


I don't see it invalidating any sigs. AIM_SERVERS is only used for these
sids: 1631, 1632, 1633, 1393, 1752

BTW, what is a rang?


I consolidated the ranges to this:
var AIM_SERVERS [64.12.0.0/16,205.188.0.0/16]

We were discussing of adding 205.188.4.0/16

Later,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part