Re: snort reference

[Matt Kettler <mkettler () evi-inc com>]

At 05:44 PM 1/13/2004, Jinqiao Yu wrote:
> I got one question. When one snort signature is matched, will all of the 
> references, which are listed in the sig-msg.map file,  be caught and put 
> into the sig-reference database? If so, doesn't snort use the uniqe 
> signature id as the primary key directly insteading of using a set of 
> auto-incremented key set as in its 1.06 schema. Since the signature and 
> reference match are fixed.
> Please advise me. Thanks a lot.

You've posted this question 3 times.. It still does not make sense to me. 
Can you try re-wording yourself in a manner which clearer?








-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users