[Snort-users] snort classification Question

mohamad hosein jafari smhjafari68 at ...11827...
Thu Aug 23 01:18:36 EDT 2012


thanks james


yes joel but I said before that I need more information than that
description

On Wed, Aug 22, 2012 at 7:27 PM, Joel Esler <jesler at ...1935...> wrote:

> On Aug 22, 2012, at 12:32 AM, mohamad hosein jafari <smhjafari68 at ...11827...>
> wrote:
>
> I need more information about these classtypes :
> """
> tcp-connection
> unknown
> protocol-command-decode
> icmp-event
> web-application-activity
> non-standard-protocol
> policy-violation
> """
> I need your help in these classtypes and I have more information about and
> some alert that was in these categories
>
>
> The descriptions for these classifications are right next to them in the
> classification.config file.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120823/72681988/attachment.html>


More information about the Snort-users mailing list