[Snort-devel] Question on portvar

snort user snort.user at ...2499...
Thu Jul 24 10:27:08 EDT 2008


Hello and greetings.

I have a question about the portvar option of snort that was
introduced a while back.
When this change was made, did it affect only parser.c or did it
affect the rest of the system - detection stage, how rtn/otn is
created and looked up?

Any help is appreciated.

Thanks !




More information about the Snort-devel mailing list