[Snort-sigs] Snort-sigs Digest, Vol 14, Issue 16

Y M snort at outlook.com
Sun Jul 22 15:58:37 EDT 2018


I am not familiar with what "BRORE STRENGE ADMITT" is. However, indicator scan rules are in the indicator-scan.rules file or in snort.rules, depending on how you have your rules setup. sid:19559 in the indicator-scan.rules.
________________________________
From: Snort-sigs <snort-sigs-bounces at lists.snort.org> on behalf of jeanmicheltangue via Snort-sigs <snort-sigs at lists.snort.org>
Sent: Sunday, July 22, 2018 10:45 PM
To: snort-sigs at lists.snort.org
Subject: Re: [Snort-sigs] Snort-sigs Digest, Vol 14, Issue 16

Jai seen in /etc/snort/sid-msg.map at Part 19559 Indicator-scan BRORE STRENGE ADMITT. But it will show me how the rule is written. I want to see the integr The source address, the direction the direction, the destination address, the action etc etc



Envoyé depuis mon smartphone Samsung Galaxy.

-------- Message d'origine --------
De : snort-sigs-request at lists.snort.org
Date : 22/07/2018 19:00 (GMT+00:00)
À : snort-sigs at lists.snort.org
Objet : Snort-sigs Digest, Vol 14, Issue 16

Send Snort-sigs mailing list submissions to
snort-sigs at lists.snort.org

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.snort.org/mailman/listinfo/snort-sigs
or, via email, send a message with subject or body 'help' to
snort-sigs-request at lists.snort.org

You can reach the person managing the list at
snort-sigs-owner at lists.snort.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Snort-sigs digest..."

Today's Topics:

   1. Snort rules (Jean Michel Tangu?)
   2. Snort rules (Jean Michel Tangu?)
   3. Re: Snort rules (Y M)
   4. Re: Snort rules (Y M)

_______________________________________________
Snort-sigs mailing list
Snort-sigs at lists.snort.org
https://lists.snort.org/mailman/listinfo/snort-sigs
http://www.snort.org

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Please visit http://blog.snort.org for the latest news about Snort!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20180722/ed9afc48/attachment-0001.html>


More information about the Snort-sigs mailing list