[Snort-devel] Bug Report

Chris Green cmg at ...402...
Tue Apr 22 05:49:06 EDT 2003


"Jim Nemetz" <vwgtinut at ...445...> writes:

> My pass rule:
>
> web-cgi.rules:pass tcp $EXTERNAL_NET any -> xxx.xxx.xxx.xxx
> (msg:"WEB-CGI calendar access";flow:to_server,established;
> uricontent:"/calendar"; nocase; classtype:attempted-recon; sid:882;
> rev:4;)

There is no port on this rule.  It shouldn't segfault however.  I'll
make a note of this. :)
-- 
Chris Green <cmg at ...402...>
Chicken's thinkin'




More information about the Snort-devel mailing list