[Snort-users] Problem with Acid 0.9.6b11 (from CVS): criteria propagation
borjam at ...778...
Tue Jun 26 07:26:14 EDT 2001
I am having this problem with both Acid 0.9.6b11 and 0.9.6b10:
When I select one of the "Unique alerts" options, and then I select one of
them, the "signature" meta criteria is stuck in my queries. If, for example,
after selecting one of the alerts in the list, I press the "back" button in
the browser, I am still carrying the alert seletion, and I don't see the full
list of unique alerts, but only the summary line for the alert I had selected.
Something similar is happening when I select an IP address from the alerts
list; I select "all alerts with X.Y.Z.T as source/dest" and the search is
done *only* for the alert signature I had selected. It seems that it is being
propagated from one query to another.
More information about the Snort-users