It will fire based on the criteria of the Meta Sig which is based upon the sigs firing in the Meta and time interval.
With regards Kings On Thu, Dec 30, 2010 at 9:05 PM, kamran shakil <[email protected]>wrote: > I wanted to make a meta signature of of ICMP 2004 AND 2000 sig ID together, > and i know meta signature is based on events and not on signatures, so just > curious about it ???? > > what if both the signatures are inside a meta signature named TEST-SIG and > i remove one of the sub signature for eg remove either 2000 or 2004 , then > does the META signature named TEST-SIG will trigger/fire up or not ???? > > wanted to know this fact, just curious ~ > > > kamran... > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
