<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
You need brackets on each end, but yes, a comma between fields is enough.
<div class=""><br class="">
</div>
<div class="">Also, I’d rely on the Snort Manual at <a href="http://manual.snort.org" class="">
manual.snort.org</a>, which is kept up to date.  Books aren’t.</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="margin: 0px; line-height: normal; font-family: 'Lucida Grande';" class="">
--</div>
<div style="margin: 0px; line-height: normal; font-family: 'Lucida Grande';" class="">
<b class="">Joel Esler</b></div>
<div style="margin: 0px; line-height: normal; font-family: 'Lucida Grande';" class="">
Manager, Talos Group</div>
<div style="margin: 0px; line-height: normal; font-family: 'Helvetica Neue';" class="">
<br class="">
</div>
</div>
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Feb 22, 2016, at 10:33 AM, Jason Long <<a href="mailto:hack3rcon@...131..." class="">hack3rcon@...131...</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">
<div style="background-color: rgb(255, 255, 255); font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 16px;" class="">
<div id="yui_3_16_0_1_1456120877429_191231" class=""><span id="yui_3_16_0_1_1456120877429_191238" class="">According to below, a "," is enough ?</span></div>
<div id="yui_3_16_0_1_1456120877429_191231" dir="ltr" class=""><span id="yui_3_16_0_1_1456120877429_191236" class=""><a href="http://books.gigatux.nl/mirror/snortids/0596006616/snortids-CHP-5-SECT-1.html" id="yui_3_16_0_1_1456120877429_191233" class="">http://books.gigatux.nl/mirror/snortids/0596006616/snortids-CHP-5-SECT-1.html</a><br class="">
</span></div>
<div class="qtdSeparateBR"><br class="">
<br class="">
</div>
<div class="yahoo_quoted" style="display: block;">
<div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" class="">
<div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;" class="">
<div dir="ltr" class=""><font size="2" face="Arial" class="">On Monday, February 22, 2016 6:59 PM, Jason Long <<a href="mailto:hack3rcon@...131..." class="">hack3rcon@...131...</a>> wrote:<br class="">
</font></div>
<br class="">
<br class="">
<div class="y_msg_container">
<div id="yiv6792240488" class="">
<div class="">
<div style="background-color: rgb(255, 255, 255); font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 16px;" class="">
<div id="yiv6792240488yui_3_16_0_1_1456120877429_188894" class=""><span id="yiv6792240488yui_3_16_0_1_1456120877429_188893" class="">Thank you. For specific two DNS address is my syntax correct :</span></div>
<div id="yiv6792240488yui_3_16_0_1_1456120877429_188896" class=""><span class=""><br clear="none" class="">
</span></div>
<div class="yiv6792240488" id="yiv6792240488yui_3_16_0_1_1456120877429_188896"># List of DNS servers on your network </div>
<div id="yiv6792240488yui_3_16_0_1_1456120877429_188896" class=""></div>
<div class="yiv6792240488" dir="ltr" id="yiv6792240488yui_3_16_0_1_1456120877429_188896">
ipvar DNS_SERVERS [XXX.XXX.XXX.XXX,!XXX.XXX.XXX.XXX]</div>
<div class="yiv6792240488qtdSeparateBR"><br clear="none" class="">
<br clear="none" class="">
</div>
<div class="yiv6792240488yqt0066300294" id="yiv6792240488yqt34627">
<div class="yiv6792240488yahoo_quoted" style="display: block;">
<div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;" class="">
<div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;" class="">
<div dir="ltr" class=""><font size="2" face="Arial" class="">On Monday, February 22, 2016 6:22 PM, Joel Esler (jesler) <<a href="mailto:jesler@...589..." class="">jesler@...589...</a>> wrote:<br clear="none" class="">
</font></div>
<br clear="none" class="">
<br clear="none" class="">
<div class="yiv6792240488y_msg_container">
<div id="yiv6792240488" class="">
<div class="">I believe what you are looking for can be found here:
<div class="yiv6792240488"><br clear="none" class="yiv6792240488">
</div>
<div class="yiv6792240488"><a rel="nofollow" shape="rect" class="yiv6792240488" target="_blank" href="http://manual.snort.org/node16.html#SECTION00312000000000000000">http://manual.snort.org/node16.html#SECTION00312000000000000000</a></div>
<div class="yiv6792240488"><br clear="none" class="yiv6792240488">
<div class="yiv6792240488">
<div class="yiv6792240488" style="letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;">
<div class="yiv6792240488" style="letter-spacing: normal; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; word-wrap: break-word;">
<div class="yiv6792240488" style="margin:0px;line-height:normal;font-family:'Lucida Grande';">
--</div>
<div class="yiv6792240488" style="margin:0px;line-height:normal;font-family:'Lucida Grande';">
<b class="yiv6792240488">Joel Esler</b></div>
<div class="yiv6792240488" style="margin:0px;line-height:normal;font-family:'Lucida Grande';">
Manager, Talos Group</div>
<div class="yiv6792240488" style="margin:0px;line-height:normal;font-family:'Helvetica Neue';">
<br clear="none" class="yiv6792240488">
</div>
</div>
</div>
<br clear="none" class="yiv6792240488Apple-interchange-newline">
<br clear="none" class="yiv6792240488Apple-interchange-newline">
</div>
<br clear="none" class="yiv6792240488">
<div class="">
<blockquote class="yiv6792240488" type="cite">
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd15899">
<div class="yiv6792240488">On Feb 22, 2016, at 4:31 AM, Jason Long <<a rel="nofollow" shape="rect" class="yiv6792240488" ymailto="mailto:hack3rcon@...131..." target="_blank" href="mailto:hack3rcon@...131...">hack3rcon@...131...</a>> wrote:</div>
<br clear="none" class="yiv6792240488Apple-interchange-newline">
</div>
<div class="yiv6792240488">
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd65704"></div>
<div class="yiv6792240488">
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd45108">Hello.<br clear="none" class="yiv6792240488">
I upload my config file here and I'm thankful if you look at this :<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
<a rel="nofollow" shape="rect" class="yiv6792240488" target="_blank" href="http://pastebin.ubuntu.com/15169338/">http://pastebin.ubuntu.com/15169338/</a><br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
How about below parts? If I want define two IP addresses and DNS then I must use "," for separate them?<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
# Setup the network addresses you are protecting<br clear="none" class="yiv6792240488">
ipvar HOME_NET XXX.XXX.XXX.XXX<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
# Set up the external network addresses. Leave as "any" in most situations<br clear="none" class="yiv6792240488">
ipvar EXTERNAL_NET XXX.XXX.XXX.XXX<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
# List of DNS servers on your network <br clear="none" class="yiv6792240488">
ipvar DNS_SERVERS XXX.XXX.XXX.XXX,XXX.XXX.XXX.XXX<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
# List of SMTP servers on your network<br clear="none" class="yiv6792240488">
ipvar SMTP_SERVERS $HOME_NET<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
# List of web servers on your network<br clear="none" class="yiv6792240488">
ipvar HTTP_SERVERS XXX.XXX.XXX.XXX<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
Thank you.</div>
<br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
------------------------------------------------------------------------------<br clear="none" class="yiv6792240488">
Site24x7 APM Insight: Get Deep Visibility into Application Performance<br clear="none" class="yiv6792240488">
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month<br clear="none" class="yiv6792240488">
Monitor end-to-end web transactions and take corrective actions now<br clear="none" class="yiv6792240488">
Troubleshoot faster and improve end-user experience. Signup Now!<br clear="none" class="yiv6792240488">
<a href="http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140" class="">http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140</a><br clear="none" class="yiv6792240488">
_______________________________________________<br clear="none" class="yiv6792240488">
Snort-users mailing list<br clear="none" class="yiv6792240488">
<a href="mailto:Snort-users@lists.sourceforge.net" class="">Snort-users@lists.sourceforge.net</a><br clear="none" class="yiv6792240488">
Go to this URL to change user options or unsubscribe:<br clear="none" class="yiv6792240488">
<a href="https://lists.sourceforge.net/lists/listinfo/snort-users" class="">https://lists.sourceforge.net/lists/listinfo/snort-users</a><br clear="none" class="yiv6792240488">
Snort-users list archive:<br clear="none" class="yiv6792240488">
<a href="http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users" class="">http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users</a><br clear="none" class="yiv6792240488">
<br clear="none" class="yiv6792240488">
Please visit <a href="http://blog.snort.org" class="">http://blog.snort.org</a> to stay current on all the latest Snort news!
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd55416"><br clear="none" class="yiv6792240488">
</div>
</div>
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd98301"></div>
</div>
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd84225"></div>
</blockquote>
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd82551"></div>
</div>
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd44084"><br clear="none" class="yiv6792240488">
</div>
</div>
<div class="yiv6792240488yqt9068248909" id="yiv6792240488yqtfd54729"></div>
</div>
</div>
<br clear="none" class="">
<br clear="none" class="">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br class="">
<br class="">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>