Snort mailing list archives
which VTR rules with 2.8.1 ?
From: Russell Fulton <r.fulton () auckland ac nz>
Date: Sun, 27 Apr 2008 12:13:53 +1200
Is CURRENT the right VTR ruleset to use with 2.8.1? I'm getting an error on sid:525 (bad traffic udp to port 0) where snort objects to 'flow:to_server' in the rule (and quite rightly). The rule seems to have change since 2.7 which did not have flow option. Russell (who is very puzzled and must be missing something). ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- which VTR rules with 2.8.1 ? Russell Fulton (Apr 26)
- Re: which VTR rules with 2.8.1 ? Joel Esler (Apr 26)