Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

Re: [Snort-devel] question about 'within' rule option

From: Martin Roesch <roesch(at)sourcefire.com>
Date: Fri Feb 14 2003 - 09:26:28 EST


Is this snort 1.9 or 2.0? I checked in some significant changes to the distance/within/byte_test/byte_jump stateful payload analysis code over the past couple days and it's in CVS now, so if you're running 2.0 then please check it out. I'll be back porting the changes into the 1.9 branch today/tonight.

     -Marty

On 2/13/03 3:18 PM, "Lawrence Reed" <Lawrence.Reed@noaa.gov> wrote:

> I am receiving a lot of false postitives from sids 1734 and 1972 ( see

-- 
Martin Roesch - Founder/CTO, Sourcefire Inc. - (410)290-1616
Sourcefire: Professional Snort Sensor and Management Console appliances
roesch(at)sourcefire.com - 
http://www.sourcefire.com
Snort: Open Source Network IDS - 
http://www.snort.org



-------------------------------------------------------
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Received on Fri Feb 14 09:33:26 2003

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:08:03 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library