[Snort-users] variable problem

Erek Adams erek at ...950...
Tue Jun 17 07:59:15 EDT 2003

On Mon, 16 Jun 2003, Jim Cervantes wrote:

> Since every address matches either !, ! or both, isn't
> your suggestion of setting EXTERNAL_NET to [!,!]
> equivalent to setting it to any?


Yep...  That should have been

	var EXTERNAL_NET ![,]

/me takes two penalty drinks.  :)

Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson

More information about the Snort-users mailing list