[Snort-devel] Meaning of depth:0

Joel Esler eslerj at ...2499...
Fri Mar 13 17:01:34 EDT 2009


A value of 0 on depth should be an invalid number.  Depth doesn't count in
byte increments (starting at 0), depth counts start at "1".
J

On Fri, Mar 13, 2009 at 4:46 PM, snort user <snort.user at ...2499...> wrote:

> Greetings all !
>
> It almost seems that the intended meaning of depth:0 is 'don't care'.
> The behavior of any rule with or without a depth:0 is exactly the same.
>
> I wanted an opinion if this is the intended behavior as well, i.e.
> ignore when depth: with a value 0.
>
>
> Thanks
>
>
> ------------------------------------------------------------------------------
> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
> powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
> easily build your RIAs with Flex Builder, the Eclipse(TM)based development
> software that enables intelligent coding and step-through debugging.
> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
> _______________________________________________
> Snort-devel mailing list
> Snort-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
>



-- 
Joel Esler
T: 302-223-5974 (-) Gtalk: jesler at ...402...
[m]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20090313/71db099a/attachment.html>


More information about the Snort-devel mailing list