Home page logo
/

snort logo Snort mailing list archives

Re: flowbits: netsenum
From: Joel Esler <jesler () sourcefire com>
Date: Wed, 29 May 2013 11:23:19 -0400

On May 29, 2013, at 10:57 AM, waldo kitty <wkitty42 () windstream net> wrote:

there is no check rule in the *.rules files for flowbits: netsenum…

It's checked in 24007.


additionally, both existing rules' MSG are identical... one should speak of "to 
client" and the other "to server" in the MSG for clarity??

The "set" rule is noalert.  You'll never see it alert.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire

------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]