Re: [ossec-list] Matching a port range

2012-08-23 Thread Doc
Ha...that's what I was afraid of, Dan. Michael, thanks for the link. I'm not really a programmer, but I might be able to muddle through that. If not, I can find someone here easy enough to help. I'll check it out. On Thursday, August 23, 2012 10:22:21 AM UTC-5, Michael Starks wrote: On

[ossec-list] Matching a port range

2012-08-22 Thread Doc
Drawing a blank here and not finding it in documentation...can we match a port range in a local rule? I'm looking to exclude messages where the destination port is dynamic within a specific range. Thanks, Doc

Re: [ossec-list] Matching a port range

2012-08-22 Thread dan (ddp)
On Wed, Aug 22, 2012 at 11:56 AM, Doc teetime2...@gmail.com wrote: Drawing a blank here and not finding it in documentation...can we match a port range in a local rule? I'm looking to exclude messages where the destination port is dynamic within a specific range. Thanks, Doc Nope.