[Snort-users] Bug in web-misc.rules

Brian bmc at ...950...
Wed Sep 19 20:20:02 EDT 2001


According to Robert D. Hughes:
> I found a problem the web-misc.rules file in the snort-current build.
> I've fixed the file and am attaching it. The problem was an out of order
> field in the last two rules.

You are mistaken.

Snort allows for most of the fields to be in any order.  There are
only a few fields that require order inside of the () markings.  Those
are content and content options.

The rules do check (and work) just fine.

-brian




More information about the Snort-users mailing list