[Snort-users] variable problem

Erek Adams erek at ...950...
Tue Jun 17 07:59:15 EDT 2003


On Mon, 16 Jun 2003, Jim Cervantes wrote:

> Since every address matches either !10.6.0.0/24, !10.5.0.0/24 or both, isn't
> your suggestion of setting EXTERNAL_NET to [!10.6.0.0/24,!10.5.0.0/24]
> equivalent to setting it to any?

*sigh*

Yep...  That should have been

	var EXTERNAL_NET ![10.6.0.0/24,10.5.0.0/24]

/me takes two penalty drinks.  :)

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson




More information about the Snort-users mailing list