[Snort-sigs] Disable a rule when another trigger

Flavian Dola flavian at ...3392...
Thu Jul 15 04:18:17 EDT 2010


Hi,

Is there a way to tell snort to disable a specific rule when another 
rule match a packet?

In fact, I have two rules that generate two different alerts on one frame.
Ideally, I would like to have just only one alert. And I don't want to 
disable permanently one of these rules.

Thanks,

Flavian




More information about the Snort-sigs mailing list