Re: [Snort-sigs] Pass rule problem

From: Bart Somers <bart.somers(at)freeler.nl>
Date: Fri Mar 07 2003 - 08:23:35 EST

Ian,

Within the standard way, snort first alerts, then passes. You can change this order by applying the "-o" option. Then it forst hits the pass. (And won't hit the alert anymore)

regards,

Bart

Ian Macdonald wrote:

> I have something like

---

This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Fri Mar 7 08:49:29 2003