[prev in list] [next in list] [prev in thread] [next in thread] 

List:       os-sim-commits
Subject:    [Os-sim-commits] os-sim/www/directives directive.php,1.20,1.21
From:       Alberto Román Linacero <alberto_r () users ! sourceforge ! net>
Date:       2006-04-26 14:00:02
Message-ID: E1FYkYl-0004PR-Bq () mail ! sourceforge ! net
[Download RAW message or body]

Update of /cvsroot/os-sim/os-sim/www/directives
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv11431

Modified Files:
	directive.php 
Log Message:
more help comments


Index: directive.php
===================================================================
RCS file: /cvsroot/os-sim/os-sim/www/directives/directive.php,v
retrieving revision 1.20
retrieving revision 1.21
diff -u -d -r1.20 -r1.21
--- directive.php	26 Apr 2006 13:48:19 -0000	1.20
+++ directive.php	26 Apr 2006 14:00:00 -0000	1.21
@@ -368,6 +368,10 @@
 <h3 style="text-align: left;">Port_from / Port_to</h3>
 This can be a port number or a sequence of comma separated port numbers. ANY port \
can also be used.<br/>  Hint: 1:DST_PORT or 1:SRC_PORT would mean level 1 src and \
dest port respectively. They can be used too. (level 2 would be 2:DST_PORT for \
example). +<br> <br>
+Also you can negate ports. This will negate ports 22 and 21 in the directive:
+<br><br>
+port="!22,25,110,!21"
 
 
 <h3 style="text-align: left;">Protocol</h3>
@@ -395,6 +399,8 @@
 For example, plugin id 1001 (snort) references it.s rules as normal \
plugin_sids.<br/>  Plugin id 1501 (apache) uses the response codes as plugin_sid (200 \
OK, 404 NOT FOUND, ...)<br/>  ANY can be used too for plugin_sid.
+<br><br>You can negate plugin_sid's: plugin_sid="1,2,3,!4" will negate just the \
plugin_sid 4. +
 <h3 style="text-align: left;">Condition</h3>
 This parameter and the following three are only valid for &quot;monitor&quot;  and \
certain &quot;detector&quot; type rules.<br/>  The logical condition that has to be \
met for the rule to match:



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Os-sim-commits mailing list
Os-sim-commits@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/os-sim-commits


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic