[Snort-sigs] IP Protocol format and sid: 1627

rico fear ricofear2000 at ...144...
Mon Apr 19 05:00:24 EDT 2004


in snort manual P.38, it's said that the format of the ip_protocol is
ip_proto:[!] <name or number>;
 
but in sid:1627, the signature contains       ip_proto:>134; 
 
i just wanted to know if there's a newer version of the manual other than the one
dated (25th February 2004)..
& if there exist any other conflicts between rule formats & actual rule signatures.
 
thanks in advance


		
---------------------------------
Do you Yahoo!?
Yahoo! Tax Center - File online by April 15th
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040419/b036b5cd/attachment.html>


More information about the Snort-sigs mailing list