[Snort-sigs] from_client == to_server ?

Dirk Geschke Dirk_Geschke at ...2049...
Wed Dec 3 08:47:05 EST 2003


Hi Martin,

> Are the flow keywords "from_client" and "to_server" the same thing, or is
> there any difference?

I think this part from the sources will give the right anser...

        if(!strcasecmp(token, "to_server"))
        {
            csd->from_client = 1;
        }

So the differnce is only "logical".

Regards

Dirk





More information about the Snort-sigs mailing list