[Snort-sigs] Sourcefire VRT Certified Snort Rules Update 2010-09-27

Eoin Miller eoin.miller at ...3415...
Tue Sep 28 13:29:35 EDT 2010


  On 9/28/2010 5:25 PM, waldo kitty wrote:
> On 9/28/2010 11:03, infosec posts wrote:
>> I have to ask, because I must be missing something here.
>>
>> SID:17494 - web-client.rules -
> what's the GID? i suspect it is 3??
>
> FWIW: i see that the GID is becoming more and more important when talking about
> rules...
>
It's (the GID) going to be 1 because that ruleset is not for a preprocessor.

-- Eoin




More information about the Snort-sigs mailing list