[Snort-users] Problem After Upgrading Snort

Steve Halligan giermo at ...187...
Fri Aug 2 07:05:03 EDT 2002


>I have tried adding HTTP_PORTS to snort.conf and 'var HTTP_PORTS =
>..." directly in web-cgi.rules. But that was apparently not what was
>needed. I would be very happy if someone could point me in the right
>direction!


What syntax did you use to add the var?  It needs to look like this:
var HTTP_PORTS 80

or

var HTTP_PORTS 80:8080

for all port between 80-8080

Something like this:

var HTTP_PORTS 80 443

does not work (yet).

-Steve




More information about the Snort-users mailing list