[Snort-users] Parsing SID field

Todd A. Jacobs nospam at ...9368...
Tue Jun 3 13:35:11 EDT 2003


In an alert file, I can't figure out what the first field of the SID 
record is telling me. For example:

	[1:1002:5]

is SID 1002, Revision 5. But what is the 1 telling me? 

-- 
The DMCA is anti-consumer. The RIAA has no right to rewrite copyright
laws to suit themselves.





More information about the Snort-users mailing list