[Snort-users] problem with snort documentation: reference keyword url explanation wrong?

Lee Clemens snort at ...13080...
Fri Mar 11 16:48:53 EST 2005

I'm confused as to why you think it suggests writing it this way

The table shows URL prefixes that are added via the specific reference codes
(bugtraq, cve, etc...). It shows "url" as adding the prefix "http://", so
that you would write "url," instead of "http://"

That page does, however, provide an (outdated) incorrect link to
"http://www.snort.org/snort-db/" which no longer seems to work...

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of James Affeld
Sent: Friday, March 11, 2005 7:06 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] problem with snort documentation: reference keyword
url explanation wrong?

In rules that work, url references without special treatment that sites like
bugtraq & arachnids get are handled this way:


the documentation 3.4.2 at:

suggests that you should it this way:

snort rules parsing then seems to barf on the unexpected :

Do you Yahoo!? 
Yahoo! Small Business - Try our new resources site!

SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list