Snort mailing list archives

disabled flowbits?


From: waldo kitty <wkitty42 () windstream net>
Date: Thu, 19 Aug 2010 13:44:23 -0400


can someone please explain why these broken SIDs are not also disabled when the 
required flowbit setting SID is disabled??


WARNING: SID 13865 depends on flowbit "http.bmp" which is set in INACTIVE SID 
16205 (SID 13865 is broken unless you also enable SID 16205).

WARNING: SID 13712 depends on flowbit "tlsv1.client_hello.request" which is set 
in INACTIVE SID 3059 (SID 13712 is broken unless you also enable SID 3059).

WARNING: SID 13711 depends on flowbit "tlsv1.client_hello.request" which is set 
in INACTIVE SID 3059 (SID 13711 is broken unless you also enable SID 3059).

WARNING: SID 13714 depends on flowbit "tlsv1.client_hello.request" which is set 
in INACTIVE SID 3059 (SID 13714 is broken unless you also enable SID 3059).

WARNING: SID 13710 depends on flowbit "tlsv1.client_hello.request" which is set 
in INACTIVE SID 3059 (SID 13710 is broken unless you also enable SID 3059).

WARNING: SID 13585 depends on flowbit "csv.download" which is set in INACTIVE 
SID 13584 (SID 13585 is broken unless you also enable SID 13584).

WARNING: SID 13713 depends on flowbit "tlsv1.client_hello.request" which is set 
in INACTIVE SID 3059 (SID 13713 is broken unless you also enable SID 3059).


------------------------------------------------------------------------------
This SF.net email is sponsored by 

Make an app they can't live without
Enter the BlackBerry Developer Challenge
http://p.sf.net/sfu/RIM-dev2dev 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: