[Snort-sigs] ports

Esler, Joel - Contractor joel.esler at ...783...
Wed Jan 5 05:02:02 EST 2005


you can't do a list of ports, the best you can do is something like
 
---snort.conf----
var SPECIFIC_PORT 21
var SPECIFIC_PORT 110
 
then in your rule
 
alert tcp any $SPECIFIC_PORT -> any any blah blah.

-----Original Message-----
From: snort-sigs-admin at lists.sourceforge.net
[mailto:snort-sigs-admin at lists.sourceforge.net] On Behalf Of reynald
Sent: Tuesday, January 04, 2005 10:49 PM
To: snort-sigs at lists.sourceforge.net
Cc: Reynald Mahinay
Subject: [Snort-sigs] ports


Hello,
 
How can i define a list of ports? eg. 25,110 doesn't work... Now i know
snort can do
port ranging, but how about a specific list of ports only.
 
please help..thanks
 
 
reynald

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20050105/a59bd5ed/attachment.html>


More information about the Snort-sigs mailing list