[Snort-devel] Portlists

Steven Sturges steve.sturges at ...402...
Tue Oct 28 16:44:05 EDT 2008


Yes, this should be supported...

portvar TEST_PORTS [80,[1,2,3],8000:9000]
alert tcp any $TEST_PORTS -> any any (msg:"Test ports"; sid:3;)

snort user wrote:
> Hello,
> 
> With PORTLISTS (snort 2.8) does it support list of lists of ports/ranges?
> 
> for e.g. portvar TEST_PORTS [80,[1,2,3],8000:9000]
> 
> Thanks
> 
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> 




More information about the Snort-devel mailing list