Re: snort3: Active: active.device is mandatory

"Russ Combs \(rucombs\) via Snort-devel" <[email protected]> Tue, 15 Oct 2019 12:46:43 +0000
Newsgroups gmane.comp.security.ids.snort.devel
Message-ID <[email protected]>
--===============4282480185453955846==
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_19BE97A1FFF841B59A7D1F984F1D5514ciscocom_"

--_000_19BE97A1FFF841B59A7D1F984F1D5514ciscocom_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_19BE97A1FFF841B59A7D1F984F1D5514ciscocom_
Content-Type: text/html; charset="utf-8"
Content-ID: <[email protected]>
Content-Transfer-Encoding: base64
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--_000_19BE97A1FFF841B59A7D1F984F1D5514ciscocom_--

--===============4282480185453955846==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-devel mailing list
[email protected]
https://lists.snort.org/mailman/listinfo/snort-devel

Please visit http://blog.snort.org for the latest news about Snort!

--===============4282480185453955846==--