Snort - the de facto standard for intrusion detection/prevention
next up previous
Next: 4.32 What do the Up: 4 Rules and Alerts Previous: 4.30 Is there a

4.31 How long can address lists, variables, or rules be?

The Snort parser has an 8K limit on variables and rules after expansion. In practice, this is not a major limitation. :-)



Nigel Houghton 2006-10-02