[Snort-devel] Re: [Snort-users] Rule Order

From: Allan Dover <allan(at)redwoods.ca>
Date: Fri May 02 2003 - 08:29:12 EDT

Hey Ron,

I am having the same problem as you. As soon as I switched to pass alert log, I am getting undefined icmp errors. Interestingly enough these were known icmp alerts L3retriever and so on.

I am still a piglet with snort ( dont like using newbie ) Anyone have any other suggestions ?

Allan Dover
Systems Administrator

###################################################

This e-mail communication (including any or all attachments) is intended only for the use of the person or entity to which it is addressed and may contain confidential and/or privileged material. If you are not the intended recipient of this e-mail, any use, review, retransmission, distribution, dissemination, copying, printing, or other use of, or taking of any action in reliance upon this e-mail, is strictly prohibited. If you have received this e-mail in error, please contact the sender and delete the original and any copy of this e-mail and any printout thereof, immediately. Your co-operation is appreciated.

• Original Message ----- From: "Ron Shuck" <rshuck@Buchanan.com> To: <snort-users@lists.sourceforge.net> Cc: <snort-devel@lists.sourceforge.net> Sent: Thursday, May 01, 2003 3:33 PM Subject: [Snort-users] Rule Order

> Hi,
>
> Has anyone else changed the rule order under 2.0?

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-devel mailing list
Snort-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-devel Received on Fri May 2 11:38:26 2003