snort reference

["Jinqiao Yu" <jinqiaoyu () hotmail com>]

Hi, Guys:
I got one question. When one snort signature is matched, will all of the 
references, which are listed in the sig-msg.map file,  be caught and put 
into the sig-reference database? If so, doesn't snort use the uniqe 
signature id as the primary key directly insteading of using a set of 
auto-incremented key set as in its 1.06 schema. Since the signature and 
reference match are fixed.
Please advise me. Thanks a lot.


Victor

_________________________________________________________________
There are now three new levels of MSN Hotmail Extra Storage!  Learn more. 
http://join.msn.com/?pgmarket=en-us&page=hotmail/es2&ST=1



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users