5005N/AFix the comments w.r.t. configuration file usage with the -T option.

5824N/AThis change has been submitted upstream.

1768N/A

5824N/AAdjust the reference to "networks(4)" to be "networks(5)".

5824N/AThis change should be sent upstream.

3433N/A

5824N/A--- snort.8.orig 2016-04-20 10:13:29.946194815 -0700

5824N/A+++ snort.8 2016-04-20 10:14:01.254235607 -0700

3433N/A@@ -339,8 +339,7 @@

3433N/A indicating that everything is ready to proceed. This is a good

3433N/A switch to use if daemon mode is going to be used, it verifies that

3433N/A the Snort configuration that is about to be used is valid and won't fail at

3433N/A-run time. Note, Snort looks for either /etc/snort.conf or ./snort.conf.

3433N/A-If your config lives elsewhere, use the -c option to specify a valid

3433N/A+run time. Note that you will need to use the -c option to specify a valid

3433N/A .I config-file.

3433N/A .IP "-u user"

3433N/A Change the user/UID Snort runs under to

5824N/A@@ -603,7 +602,7 @@

5824N/A .IP "\fBdst net \fInet\fR"

5824N/A True if the IP destination address of the packet has a network

5824N/A number of \fInet\fP. \fINet\fP may be either a name from /etc/networks

5824N/A-or a network number (see \fInetworks(4)\fP for details).

5824N/A+or a network number (see \fInetworks(5)\fP for details).

5824N/A .IP "\fBsrc net \fInet\fR"

5824N/A True if the IP source address of the packet has a network

5824N/A number of \fInet\fP.