[Snort-devel] Logging single alert per packet

Beenish Raza beenish.raza at ...445...
Wed May 21 05:21:14 EDT 2014


I want to know the command in snort which allows that snort stop scanning a packet after the 1st match is found. In other words, I have to avoid further scanning a packet once a packet is matched against a rule (no need to report the longest match). 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-devel/attachments/20140521/db5c4da1/attachment.html>


More information about the Snort-devel mailing list