RE: [Snort-sigs] ports

["Esler, Joel - Contractor" <joel.esler () rcert-s army mil>]

you can't do a list of ports, the best you can do is something like
 
---snort.conf----
var SPECIFIC_PORT 21
var SPECIFIC_PORT 110
 
then in your rule
 
alert tcp any $SPECIFIC_PORT -> any any blah blah.

-----Original Message-----
From: snort-sigs-admin () lists sourceforge net
[mailto:snort-sigs-admin () lists sourceforge net] On Behalf Of reynald
Sent: Tuesday, January 04, 2005 10:49 PM
To: snort-sigs () lists sourceforge net
Cc: Reynald Mahinay
Subject: [Snort-sigs] ports


Hello,
 
How can i define a list of ports? eg. 25,110 doesn't work... Now i know
snort can do
port ranging, but how about a specific list of ports only.
 
please help..thanks
 
 
reynald