[Snort-users] pass rule problem

Martin Roesch roesch at ...421...
Fri Jan 26 13:37:08 EST 2001


The rule ordering is screwed up, apparently this one snuck in and nobody
noticed.  I'll fix it and commit a patch to CVS ASAP.

    -Marty

alexh at ...1207... wrote:
> 
> Pulled from David.Hoelzer at ...30...'s mail (Thu, Jan 25 2001 [09:26AM -0500]):
> >
> >
> > Are you using the "Pass -> alert -> log" switch, or the default "Alert -> pass -> log"?
> >
> >
> 
> I'm using the default: "alert -> pass -> log", but this shouldn't matter
> as it's the *logging* I'm trying to pass, not the *alerting*.
> 
> As I said, what I had worked fine under 1.6.
> 
> --
> Alex Hooper
> Senior Programmer
> Clockwork Web.
> +44 20 7471 0770
> http://www.clockworkweb.com
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users

--
Martin Roesch
roesch at ...421...
http://www.snort.org




More information about the Snort-users mailing list