[Snort-users] Negation of appid keywords

Jeff Hammett jeff at ...17136...
Thu Apr 9 18:55:07 EDT 2015


I am trying to create some rules using negated appid keywords and have been unsuccessful.

I came across this thread (http://seclists.org/snort/2014/q4/533) from a few months back asking the same question, has anyone been successful at negating appid keywords?


Thanks

Jeff



More information about the Snort-users mailing list