From: snort user <snort.user_at_nospam>
Date: Thu Jul 24 2008 - 14:27:08 GMT To: firstname.lastname@example.org
Hello and greetings.
I have a question about the portvar option of snort that was
introduced a while back.
When this change was made, did it affect only parser.c or did it
affect the rest of the system - detection stage, how rtn/otn is
created and looked up?