[Snort-devel] small "-z" fix

Alberto Dainotti alberto at ...68...
Thu May 9 11:47:01 EDT 2002

Hello, please tell me if this is the right place to submit this.

Command line option "-z" doesn't take any arguments.
The attached patch to the stable branch makes it coherent to
the man page (of stable branch). Otherwise a command line argument/option
following "-z" would be erroneusly ignored.

snort.c.diff has the same modifications already made to the current

Instead, snort.conf.diff should be applied to current branch too.


PGP Key available at: http://www.urizen.it/pgp
Key Fingerprint: 87CF D95A CE0F 3188 3950  4B1F 3B56 DE69 D05F B8F5
-------------- next part --------------
--- snort-stable/snort.conf     2002/05/08 20:14:12     1.1
+++ snort-stable/snort.conf     2002/05/09 18:20:17     1.2
@@ -100,7 +100,7 @@ preprocessor frag2
 # stream4: stateful inspection/stream reassembly for Snort
-# Use in concert with the -z [all|est] command line switch to defeat 
+# Use in concert with the -z command line switch to defeat 
 # stick/snot against TCP rules.  Also performs full TCP stream 
 # reassembly, stateful inspection of TCP streams, etc.  Can statefully
 # detect various portscan types, fingerprinting, ECN, etc.
-------------- next part --------------
--- snort-stable/snort.c        2002/05/08 20:14:11     1.1
+++ snort-stable/snort.c        2002/05/09 18:20:17     1.2
@@ -635,7 +635,7 @@ int ShowUsage(char *progname)
     fputs( "        -x         Display IPX packets\n", stderr);
     fputs("        -y         Include year in timestamp in the alert and log files\n", stderr);
-    fputs("        -z         Set assurance mode: all, est\n", stderr);
+    fputs("        -z         Set assurance mode, match on established sesions (for TCP)\n", stderr);
     fputs("        -?         Show this information\n", stderr);
     fputs("<Filter Options> are standard BPF options, as seen in TCPDump\n", stderr);
@@ -691,7 +691,7 @@ int ParseCmdLine(int argc, char *argv[])
 #ifndef WIN32
     valid_options = "B:fk:TXL:IOCqS:pNA:m:F:DM:br:xeh:l:dc:n:P:"
-        "i:G:vV?aso6u:g:t:Uyz:";
+        "i:G:vV?aso6u:g:t:Uyz";
     valid_options = "B:fk:TXL:IOCWqS:pNA:m:F:DM:br:xeh:l:dc:n:P:"

More information about the Snort-devel mailing list