[Snort-users] Variables

Michael Brown mike.a.brown09 at ...11827...
Fri Aug 31 09:32:13 EDT 2012


I was just thinking about it is there any issue with not using brackets? I
just foresee something causing issues down the road.

Thank you,

Michael A. Brown
(Google Voice) (757) 912-0836
B.S. Information Technology: Network Specialist
A.A.S. Information Technology: Technical Support

"The only thing for the triumph of evil is for good men to do nothing"
-Edmund Burke



On Fri, Aug 31, 2012 at 9:28 AM, Joel Esler <jesler at ...1935...> wrote:

> Snort doesn't force this, no.
>
>
> On Aug 31, 2012, at 9:27 AM, Michael Brown <mike.a.brown09 at ...11827...>
> wrote:
>
> Does snort force this as it looks like it currently does not?
>
> Thank you,
>
> Michael A. Brown
> (Google Voice) (757) 912-0836
> B.S. Information Technology: Network Specialist
> A.A.S. Information Technology: Technical Support
>
> "The only thing for the triumph of evil is for good men to do nothing"
> -Edmund Burke
>
>
>
> On Fri, Aug 31, 2012 at 9:13 AM, Joel Esler <jesler at ...1935...> wrote:
>
>> On Aug 31, 2012, at 9:07 AM, Michael Brown <mike.a.brown09 at ...11827...>
>> wrote:
>>
>> > I have a variable called custom_ports. The values of that for this test
>> is 81, 80, 8080, 10000 how am I correctly supposed to define this variable?
>> Like the following?
>> >
>> > portvar cusotm_ports [81,80,8080,10000]
>> >
>> > or
>> >
>> > portvar custom_ports 81,80,8080,10000
>>
>> Yes, you should be using brackets.
>>
>> --
>> Joel Esler
>> Senior Research Engineer, VRT
>> OpenSource Community Manager
>> Sourcefire
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20120831/2ce05b04/attachment.html>


More information about the Snort-users mailing list