[Snort-users] hi and low source port in SNORT parser

Bui, Khiem Q Khiem.Bui at ...2222...
Mon Jun 11 13:23:22 EDT 2001


I'm a new user of SNORT.  I was looking at the SNORT parser code and I
having trouble understanding by lsp(low source port) and hsp (hi source
since I'm new at this, please forgive my ignorance.  I will be appreciated
if anyone could explain to me why we break up source or destination ports
into hi and low.
Thank you again.

David Bui
Software Engineer
The Boeing Company

More information about the Snort-users mailing list