Re: portrange

On 4/28/06, John Newman <jnn@xxxxxxxxx> wrote:
> rather than having to do "not dst port X and not dst port X+1 and ..."
> which, on my box, with 1000 ports, makes snort start rather slowly.

what's wrong with '... not (dst port >= X and dst port <= X)' ?

--
GDB has a 'break' feature; why doesn't it have 'fix' too?


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0709&bid&3057&dat1642