[Snort-users] multiple port variable fun

ryan at ...14163... ryan at ...14163...
Tue Jul 3 00:57:54 EDT 2007


Hey all,

My network has http traffic on multiple ports, what is the best way to  
setup a http_port variable so all relevant rules alerts on multiple  
ports.  I need to setup the equvilant of:

var http_ports 80,8082,3001

I know snort does not allow a comma seperated value for ports, just  
wondering if there is a way to have a port variable that is not a  
range etc.

Cheers
Ryan






More information about the Snort-users mailing list