No subject


Thu Nov 23 16:36:19 EST 2017


multiple conditions will all need to be met.

Sent from my iPhone

> On 7 Feb 2017, at 05:51, hackthissite7979 at ...131... wrote:
>=20
> Is it possible to write multiple detection into a single snort rule?
>=20
> HTS
>=20=20
>=20
>=20
> Sent from Yahoo Mail. Get the app
> -------------------------------------------------------------------------=
-----
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=3Dsnort-users
>=20
> Please visit http://blog.snort.org to stay current on all the latest Snor=
t news!

--Apple-Mail-E207CBB2-8184-4E0A-973C-2E88312A9637
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=
=3Dutf-8"></head><body dir=3D"auto"><div>From memory, multiple conditions a=
re handled as "AND" rather than "OR", So multiple conditions will all need =
to be met.<br><br>Sent from my iPhone</div><div><br>On 7 Feb 2017, at 05:51=
, <a href=3D"mailto:hackthissite7979 at ...131...">hackthissite7979 at ...131...<=
/a> wrote:<br><br></div><blockquote type=3D"cite"><div><div style=3D"color:=
#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Hel=
vetica, Arial, Lucida Grande, Sans-Serif;font-size:16px"><div id=3D"yui_3_1=
6_0_ym19_1_1486446484028_3339"><span id=3D"yui_3_16_0_ym19_1_1486446484028_=
3379">Is it possible to write multiple detection into a single snort rule?<=
/span></div><div id=3D"yui_3_16_0_ym19_1_1486446484028_3339"><span><br></sp=
an></div><div id=3D"yui_3_16_0_ym19_1_1486446484028_3339"><span>HTS</span><=
/div><div></div><div id=3D"yui_3_16_0_ym19_1_1486446484028_3338"> </di=
v><div class=3D"signature" id=3D"yui_3_16_0_ym19_1_1486446484028_3314"><div=
 id=3D"yui_3_16_0_ym19_1_1486446484028_3320"><br></div><div id=3D"yui_3_16_=
0_ym19_1_1486446484028_3319"><br></div><div id=3D"yui_3_16_0_ym19_1_1486446=
484028_3313">Sent from Yahoo Mail. <a rel=3D"nofollow" target=3D"_blank" hr=
ef=3D"https://yho.com/148vdq" id=3D"yui_3_16_0_ym19_1_1486446484028_3457">G=
et the app</a></div></div></div></div></blockquote><blockquote type=3D"cite=
"><div><span>--------------------------------------------------------------=
----------------</span><br><span>Check out the vibrant tech community on on=
e of the world's most</span><br><span>engaging tech sites, <a href=3D"http:=
//SlashDot.org">SlashDot.org</a>! <a href=3D"http://sdm.link/slashdot">http=
://sdm.link/slashdot</a></span></div></blockquote><blockquote type=3D"cite"=
><div><span>_______________________________________________</span><br><span=
>Snort-users mailing list</span><br><span><a href=3D"mailto:Snort-users at ...3204...=
ts.sourceforge.net">Snort-users at lists.sourceforge.net</a></span><br><span>G=
o to this URL to change user options or unsubscribe:</span><br><span><a hre=
f=3D"https://lists.sourceforge.net/lists/listinfo/snort-users">https://list=
s.sourceforge.net/lists/listinfo/snort-users</a></span><br><span>Snort-user=
s list archive:</span><br><span><a href=3D"http://sourceforge.net/mailarchi=
ve/forum.php?forum_name=3Dsnort-users">http://sourceforge.net/mailarchive/f=
orum.php?forum_name=3Dsnort-users</a></span><br><span></span><br><span>Plea=
se visit <a href=3D"http://blog.snort.org">http://blog.snort.org</a> to sta=
y current on all the latest Snort news!</span></div></blockquote></body></h=
tml>=

--Apple-Mail-E207CBB2-8184-4E0A-973C-2E88312A9637--




More information about the Snort-users mailing list