[Snort-users] Rule 17494

waldo kitty wkitty42 at ...14940...
Fri Oct 1 16:35:57 EDT 2010


On 10/1/2010 16:23, JJC wrote:
> As a matter of clarity... there are a number of distinct differences between a
> GID:3 stub rule and a GID:1 regular rule.

thanks for that... i did actually look for a GID:3 entry but not the soid one... 
i wasn't sure that the GID was even necessary as i've never seen it used /in/ 
rules until a few very recently...




More information about the Snort-users mailing list