Snort mailing list archives
Negation of appid keywords
From: Jeff Hammett <jeff () jeffhammett com>
Date: Thu, 9 Apr 2015 15:55:07 -0700
I am trying to create some rules using negated appid keywords and have been unsuccessful. I came across this thread (http://seclists.org/snort/2014/q4/533) from a few months back asking the same question, has anyone been successful at negating appid keywords? Thanks Jeff ------------------------------------------------------------------------------ BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Negation of appid keywords Jeff Hammett (Apr 09)