[Snort-users] problem with snort documentation: reference keyword url explanation wrong?

James Affeld jamesaffeld at ...131...
Fri Mar 11 16:05:55 EST 2005


In rules that work, url references without special
treatment that sites like bugtraq & arachnids get are
handled this way:

reference:url,www.somesite.com

the documentation 3.4.2 at:
http://www.snort.org/docs/snort_htmanuals/htmanual_231/node20.html#SECTION00442100000000000000

suggests that you should it this way:
reference:url,http://www.somesite.com

snort rules parsing then seems to barf on the
unexpected :


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/ 




More information about the Snort-users mailing list