[Snort-users] var or ipvar?

waldo kitty wkitty42 at ...14940...
Mon Jan 28 14:56:44 EST 2013

var used to be used for most all var definitions... then work was being done for 
IPv6 and ipvar was created... since then, it seems that ipvar has been retained 
for all and var is simply no longer used...

is this accurate?

why is var not retained as an alias for ipvar? systems have been breaking all 
around us and it is only just now that we're starting to find this possibly 
being the problem :(

will it hurt to have both var and ipvar pointing to the same definitions??

will older snorts fall over because of ipvar being introduced into their 
environment before they are ready for it?

More information about the Snort-users mailing list