[Snort-devel] [Snort-users] Rule Order [snort-users-admin at lists.sourceforge.net in Pass-Through List] ['snort' in Pass-Through List] ['snort-users' in Pass-Through List]

Ron Shuck rshuck at ...1949...
Thu May 1 12:47:17 EDT 2003


Hi,

Has anyone else changed the rule order under 2.0?

When I upgraded to 2.0, I started having problems with ICMP alerts when
my rule order was set to 'pass alert log'. Actually, any setting other
than default caused problems. ICMP alerts happen, they just skip the
normal rule and trigger the "Undefined Code" rule.

TIA,

Ron Shuck, CISSP, GCIA - Managing Consultant 
Buchanan Associates - A Technology Company in the People Business 
http://www.buchanan.com 
http://www.isc2.org
http://www.giac.org


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list ort-users






More information about the Snort-devel mailing list