[Snort-sigs] Packet tripping multiple rules?

Jason Brvenik jasonb at ...435...
Tue Nov 24 00:48:46 EST 2009


Have a look at event queue in the manual for an explanation of what
happens in that case.

On Mon, Nov 23, 2009 at 10:36 AM, Guise McAllaster
<guise.mcallaster at ...2420...> wrote:
> I'm curious, if a packet matches multiple rules do they all fire off or does
> it fire off the first alert it matches and then stops looking?
>
> Thanks.
>
> Guise
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus
> on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>
>




More information about the Snort-sigs mailing list