[Snort-users] snort classification Question

Joel Esler jesler at ...1935...
Wed Aug 22 10:57:21 EDT 2012


On Aug 22, 2012, at 12:32 AM, mohamad hosein jafari <smhjafari68 at ...14542....> wrote:

> I need more information about these classtypes :
> """
> tcp-connection
> unknown
> protocol-command-decode
> icmp-event
> web-application-activity
> non-standard-protocol
> policy-violation
> """
> I need your help in these classtypes and I have more information about and some alert that was in these categories

The descriptions for these classifications are right next to them in the classification.config file.  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120822/9a10bea1/attachment.html>


More information about the Snort-users mailing list