[Snort-users] numbers meaning

Brian bmc at ...950...
Mon Jan 12 11:48:06 EST 2004


On Fri, Jan 09, 2004 at 01:31:11PM -0600, Mauricio Smythe wrote:
> Please what is the meaning of the numbers within the brakets in each alert
> in the snort alert file? [1:407:4]

Generator:Identifier:Revision

For your example, it means:
Snort Rules, "ICMP Destination Unreachable (Undefined Code!)", Revision 4.

Brian




More information about the Snort-users mailing list