[Snort-users] minfrag preprocessor docs notice

Anatoly Pugachev mator at ...1394...
Sun Mar 4 12:57:45 EST 2001


hello.
diggin through the version 1.7 snort source code spp_minfrag.c i found this comments on line 72: 
       /* we'll assume any token that starts with a digit is the threshold value, 
                  and non-digit tokens are the home/any detection modifiers */
so, there is more params (home/any) to the minfrag preprocessor which are not documented in 
writting_snort_rules.htm
thats all
regards
-- 
Anatoly Pugachev, system/network administrator
phone/fax : (+7 095) 151-92-63 , 151-93-69




More information about the Snort-users mailing list