[Snort-users] Variables

Michael Brown mike.a.brown09 at ...11827...
Fri Aug 31 09:27:32 EDT 2012


Does snort force this as it looks like it currently does not?

Thank you,

Michael A. Brown
(Google Voice) (757) 912-0836
B.S. Information Technology: Network Specialist
A.A.S. Information Technology: Technical Support

"The only thing for the triumph of evil is for good men to do nothing"
-Edmund Burke



On Fri, Aug 31, 2012 at 9:13 AM, Joel Esler <jesler at ...1935...> wrote:

> On Aug 31, 2012, at 9:07 AM, Michael Brown <mike.a.brown09 at ...11827...>
> wrote:
>
> > I have a variable called custom_ports. The values of that for this test
> is 81, 80, 8080, 10000 how am I correctly supposed to define this variable?
> Like the following?
> >
> > portvar cusotm_ports [81,80,8080,10000]
> >
> > or
> >
> > portvar custom_ports 81,80,8080,10000
>
> Yes, you should be using brackets.
>
> --
> Joel Esler
> Senior Research Engineer, VRT
> OpenSource Community Manager
> Sourcefire
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120831/64f83d99/attachment.html>


More information about the Snort-users mailing list