Snort mailing list archives

Re: numbers meaning


From: Brian <bmc () snort org>
Date: Mon, 12 Jan 2004 14:47:46 -0500

On Fri, Jan 09, 2004 at 01:31:11PM -0600, Mauricio Smythe wrote:
Please what is the meaning of the numbers within the brakets in each alert
in the snort alert file? [1:407:4]

Generator:Identifier:Revision

For your example, it means:
Snort Rules, "ICMP Destination Unreachable (Undefined Code!)", Revision 4.

Brian


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: