[Snort-devel] Re: Logging
jason at ...506...
Wed Jul 11 14:12:13 EDT 2001
I've been thinking the same thing. It wouldn't be hard to implement.
I'll try to get it out before I leave for defcon tonight.
On 11 Jul 2001 14:04:08 -0400, Michael J Clark wrote:
> I've noticed that when you drop a packet it makes a log entry. I would like to not have it log everytime. So Im
> thinking 2 rules could be made drop and ldrop. ldrop would log the drop, drop would not. Another way to do this would
> be to make drop not log and but an alert rule before the drop rule.
More information about the Snort-devel