[Snort-users] Variables

Joel Esler jesler at ...1935...
Fri Aug 31 09:13:00 EDT 2012


On Aug 31, 2012, at 9:07 AM, Michael Brown <mike.a.brown09 at ...11827...> wrote:

> I have a variable called custom_ports. The values of that for this test is 81, 80, 8080, 10000 how am I correctly supposed to define this variable? Like the following? 
> 
> portvar cusotm_ports [81,80,8080,10000]
> 
> or 
> 
> portvar custom_ports 81,80,8080,10000

Yes, you should be using brackets.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire



More information about the Snort-users mailing list