[Snort-users] Rule 17494

JJC cummingsj at ...11827...
Fri Oct 1 16:40:58 EDT 2010


Only required in GID:3 stub rules ;-)

On Fri, Oct 1, 2010 at 2:35 PM, waldo kitty <wkitty42 at ...14940...> wrote:

> On 10/1/2010 16:23, JJC wrote:
> > As a matter of clarity... there are a number of distinct differences
> between a
> > GID:3 stub rule and a GID:1 regular rule.
>
> thanks for that... i did actually look for a GID:3 entry but not the soid
> one...
> i wasn't sure that the GID was even necessary as i've never seen it used
> /in/
> rules until a few very recently...
>
>
> ------------------------------------------------------------------------------
> Start uncovering the many advantages of virtual appliances
> and start using them to simplify application deployment and
> accelerate your shift to cloud computing.
> http://p.sf.net/sfu/novell-sfdev2dev
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20101001/bab26a71/attachment.html>


More information about the Snort-users mailing list