[Snort-devel] Proposal: New rule action, "info"

tlewis at ...255... tlewis at ...255...
Thu Nov 1 10:52:04 EST 2001

On Thu, 1 Nov 2001, Matthew Callaway wrote:

> Opinions?

I think that having this behavior coded into snort the way that it is
is silly.  You should present people with a set of orthogonal options
and then let them decide which ones they want.  Having a name for each
potential combination of actions is the wrong way.

That having been said, it is the snort way, so in that context it
might be the right thing here.

Todd Lewis
tlewis at ...255...

More information about the Snort-devel mailing list