cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
438
Views
0
Helpful
1
Replies

Sig (string) File without port setting

weaton
Level 1
Level 1

Can you configure a string signature without using a specific port? The trap would be for any packet containing that string.

Wally

1 Reply 1

mcerha
Level 3
Level 3

It is best to specifiy the ports, because the behavior of the sensor might change depending on how the sensor is configured if it is not explicitly configured. To specify interest in any port you can use:

ServicePorts any