[Snort-users] which VTR rules with 2.8.1 ?

Russell Fulton r.fulton at ...3809...
Sat Apr 26 20:13:53 EDT 2008


Is CURRENT the right VTR ruleset to use with 2.8.1?

I'm getting an error on sid:525 (bad traffic udp to port 0) where  
snort objects to 'flow:to_server' in the rule (and quite rightly).   
The rule seems to have change since 2.7 which did not have flow option.

Russell (who is very puzzled and must be missing something).






More information about the Snort-users mailing list