[Snort-sigs] snort rules

Andreas Czerniak ac at ...141...
Sun Oct 7 03:38:13 EDT 2001


Hi,

from http://www.snort.org/docs/writing_rules/chap2.html

sid				Snort rule id
rev				rule revision number
content			search for a pattern in the packet's payload

Regards,
			Andreas.

-- On 07.10.2001 10:35:11 +0000 adelkhah at ...140... wrote:

> Hi
>   Could you please explain option fields such as content, sid, rev,
> reference,... in snort rules for me ?
> thanks in advance,
> Adelkhah.
///---------------------------------------------------------------------///
   Andreas Czerniak                                          ac at ...141...
   AMCS - Network   services, concepts & consulting         www.amcs.net
   Germany            communication and groupware     Fax:+49-431-678454
   PGPkey http://wwwkeys.nl.pgp.net:11371/pks/lookup?op=get&search=0xEDB224EC
///---------------------------------------------------------------------///
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 248 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20011007/a12a34a4/attachment.sig>


More information about the Snort-sigs mailing list