[Snort-devel] Re: Logging

anonpoet jason at ...506...
Wed Jul 11 14:12:13 EDT 2001


I've been thinking the same thing.  It wouldn't be hard to implement.
I'll try to get it out before I leave for defcon tonight.

Jason

On 11 Jul 2001 14:04:08 -0400, Michael J Clark wrote:
> I've noticed that when you drop a packet it makes a log entry.  I would like to not have it log everytime.  So Im 
> thinking 2 rules could be made drop and ldrop. ldrop would log the drop, drop would not.  Another way to do this would 
> be to make drop not log and but an alert rule before the drop rule.
> 
> Mike
> 
> 






More information about the Snort-devel mailing list