[Snort-users] Variables

Joel Esler jesler at ...1935...
Fri Aug 31 09:28:59 EDT 2012


Snort doesn't force this, no.


On Aug 31, 2012, at 9:27 AM, Michael Brown <mike.a.brown09 at ...11827...> wrote:

> Does snort force this as it looks like it currently does not?
> 
> Thank you,
> 
> Michael A. Brown
> (Google Voice) (757) 912-0836
> B.S. Information Technology: Network Specialist
> A.A.S. Information Technology: Technical Support
> 
> "The only thing for the triumph of evil is for good men to do nothing" -Edmund Burke
> 
> 
> 
> On Fri, Aug 31, 2012 at 9:13 AM, Joel Esler <jesler at ...1935...> wrote:
> On Aug 31, 2012, at 9:07 AM, Michael Brown <mike.a.brown09 at ...11827...> wrote:
> 
> > I have a variable called custom_ports. The values of that for this test is 81, 80, 8080, 10000 how am I correctly supposed to define this variable? Like the following?
> >
> > portvar cusotm_ports [81,80,8080,10000]
> >
> > or
> >
> > portvar custom_ports 81,80,8080,10000
> 
> Yes, you should be using brackets.
> 
> --
> Joel Esler
> Senior Research Engineer, VRT
> OpenSource Community Manager
> Sourcefire
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120831/335b4481/attachment.html>


More information about the Snort-users mailing list