[Snort-users] Quick Pulledpork modifysid question

Lay, James james.lay at ...15009...
Tue Jul 19 16:34:45 EDT 2011


Hey all!

 

So...trying my hand at modifying rules at the pp level...read through
some info online where some folks removed the "\"...will the below fly
like I think it will?

 

12801 "\$HOME_NET" "\$HOME_NET \!25"

 

Thanks.

 

James

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20110719/3ead7c72/attachment.html>


More information about the Snort-users mailing list