[Snort-devel] Meaning of depth:0

snort user snort.user at ...2499...
Fri Mar 13 16:46:29 EDT 2009

Greetings all !

It almost seems that the intended meaning of depth:0 is 'don't care'.
The behavior of any rule with or without a depth:0 is exactly the same.

I wanted an opinion if this is the intended behavior as well, i.e.
ignore when depth: with a value 0.


More information about the Snort-devel mailing list