[Snort-users] question

Joe Hdez moncher76 at ...131...
Tue Apr 8 14:52:05 EDT 2003


Hi,

Got a question,

I added the rule for the NETBIOS SMB trans2open buffer overflow attempt but it included a field called byte_test that it seems to be not recognized by snort 1.9.1.

I´d like to know if that rule would work if I remove that field?

Thanks

Joe



---------------------------------
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030408/f08f5033/attachment.html>


More information about the Snort-users mailing list