Re: Question

[Brian <bmc () snort org>]

On Fri, Apr 11, 2003 at 03:55:16PM -0700, Joe Hdez wrote:
> Hi, Mhh I would like to know if this signature is gonna work if I remove 
> the line byte_test:2,>,1024,0,relative,little 

Nope.

> I ask this because it?s not working with snort 1.9.1 through snortcenter, 
> it doesn?t have that field. I?d appreciate your help, Joe 

It is a 2.0 rule only.

-brian


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users