Re: How I can find description about Snort Rules

["Joel Esler (jesler)" <jesler () cisco com>]

Err.. 120-3.txt

--
Joel Esler
Manager, Talos Group




On Jul 8, 2016, at 2:12 PM, Joel Esler <jesler () cisco com<mailto:jesler () cisco com>> wrote:

Well, the first one is an ET Rule, which we don’t maintain.

The second is a preprocessor, which you’d have to look for 3-120.txt


--
Joel Esler
Manager, Talos Group




On Jul 8, 2016, at 2:01 PM, Udaya Sampath K Perera <mtudaya () gmail com<mailto:mtudaya () gmail com>> wrote:

HI ,
I am new to snort,  I want to know where I can find description about snort rules,
As An example  if I have following two rules where I can find description about these rules?
ET POLICY FTP Login Successful - Sig ID = 2003410
http_inspect: NO CONTENT-LENGTH OR TRANSFER-ENCODING IN HTTP RESPONSE Sig ID = 3

I downloaded opensource.tar.gz  snort rule set, which has text documents with id (33805.txt) , so if I Look relevant 
file with id is it find?
Thank You
Udaya





------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net<mailto:Snort-users () lists sourceforge net>
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San
Francisco, CA to explore cutting-edge tech and listen to tech luminaries
present their vision of the future. This family event has something for
everyone, including kids. Get more information and register today.
http://sdm.link/attshape

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!