[Snort-users] snort 1.8.4 rule question

Brian bmc at ...950...
Mon Mar 4 14:37:05 EST 2002


According to Sam:
> I remember reading about a new feature in snort 1.8.4-beta(x) that would
> allow you to specify a rule be matched if it was to_server, or
> something to that nature.  It seemed like it would cut down on a lot of 
> false positives but I can't find any documentation about it.
> 
> Sorry for the lack of description here, anyone played with this new
> feature (if it exists..  maybe it was in my dreams.. :) )

This feature will not be available until the 1.9 series.  We changed
our minds about adding new features to 1.8.4.  All new features are in
the 1.9 series and later.   SNORT_1_8 is for bug fixes only.   

Chris, maybe add this to the documentation and say it first appeared
in 1.9.1?

-brian





More information about the Snort-users mailing list