[Snort-devel] Question on portvar

Steven Sturges steve.sturges at ...402...
Fri Jul 25 17:12:36 EDT 2008


The portvar changes affect how rules are grouped
and data is inserted into the fast pattern matcher.

Doesn't affect the creation of the RTN/OTN.

snort user wrote:
> Hello and greetings.
> 
> I have a question about the portvar option of snort that was
> introduced a while back.
> When this change was made, did it affect only parser.c or did it
> affect the rest of the system - detection stage, how rtn/otn is
> created and looked up?
> 
> Any help is appreciated.
> 
> Thanks !
> 
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> 




More information about the Snort-devel mailing list