for example in this manual<div><a href="http://manual.snort.org/node31.html#SECTION00444000000000000000">http://manual.snort.org/node31.html#SECTION00444000000000000000</a>
</div><div>we see</div><div><strong style="font-family:'Times New Roman';font-size:medium;text-align:-webkit-center">Table:</strong><span style="font-family:'Times New Roman';font-size:medium;text-align:-webkit-center"> Snort Default Classifications</span> </div>
<div><br></div><div>I want more explanation about class types</div><div><br></div><div>Can you help me by a reference that explain more?</div><div><br></div><div>Thanks<br><div><br><div class="gmail_quote">On Tue, Aug 21, 2012 at 11:25 PM, mohamad hosein jafari <span dir="ltr"><<a href="mailto:smhjafari68@...11827..." target="_blank">smhjafari68@...11827...</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">thanks<div><br></div><div>but I saw this before</div><div><br></div><div>Now I want more explanation for this categories .</div>
<div>For example I want to know where "non-standard-protocol" use Or for which alerts it use? more than what said in this file</div>
<div>because I want to create new classify based on snort classify So I should get all information about that categorty</div><div><br></div><div>thanks<div><div class="h5"><br><br><div class="gmail_quote">On Tue, Aug 21, 2012 at 11:16 PM, Joel Esler <span dir="ltr"><<a href="mailto:jesler@...1935..." target="_blank">jesler@...1935...</a>></span> wrote:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div><div><div>On Aug 21, 2012, at 2:48 PM, mohamad hosein jafari <<a href="mailto:smhjafari68@...11827..." target="_blank">smhjafari68@...11827...</a>> wrote:</div>

<br></div><blockquote type="cite"><span style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;display:inline!important;float:none">Hi</span><div style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">

<br></div><div><div style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">

I want all snort classification's explain likes when and where it used and what alerts it used for?</div><div style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">

and what rules used to classify snort alers?</div></div></blockquote></div><br><div>Take a look at the classification.config file:</div><div><a href="http://labs.snort.org/snort/2921/classification.config" target="_blank">http://labs.snort.org/snort/2921/classification.config</a></div>

<div><br></div><div>Those classifications dictate priority for the rules.</div><div><div><br></div><div><div>--</div><div>Joel Esler</div><div>Senior Research Engineer, VRT</div><div>OpenSource Community Manager</div>
<div>Sourcefire</div></div></div></div></blockquote></div><br></div></div></div>
</blockquote></div><br></div></div>