Snort mailing list archives

Re: Help - Rule writing


From: Luke Ager <luke.ager () me com>
Date: Tue, 07 Feb 2017 09:18:49 +0000

From memory, multiple conditions are handled as "AND" rather than "OR", So multiple conditions will all need to be met.

Sent from my iPhone

On 7 Feb 2017, at 05:51, hackthissite7979 () yahoo com wrote:

Is it possible to write multiple detection into a single snort rule?

HTS
 


Sent from Yahoo Mail. Get the app
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: