[Snort-sigs] SID 407

Ruben Schattevoy schattev at ...1266...
Fri Feb 7 05:37:07 EST 2003


Hi,

I've just installed the snort-current version. Now
I recive a lot of SID 407 messages with type=3 and
code=3. Shouldn't I get SID 402 which covers this
type n' code combination. I thought 407 is a less
specific rule which should be processes after rule
402?

Regards

Ruben





More information about the Snort-sigs mailing list