[Snort-users] Which rule!

Andrew Betson rew at ...1587...
Thu Mar 15 18:39:37 EST 2001


At 16:23 15/03/2001 -0700, you wrote:
>Andrew,
>Check rule #23 in the current info.rules file. (from todays update)

Thanks for the quick reply, didnt realise how much stull was in info.rules!!
still getting used to the new rules files layout :-)

Thx

Andrew

>----- Original Message -----
>From: "Andrew Betson" <rew at ...1587...>
>To: <snort-users at lists.sourceforge.net>
>Sent: Thursday, March 15, 2001 4:14 PM
>Subject: [Snort-users] Which rule!
>
>
> > i get this logged a couple of times a minute from different ip addresses,
> > im not sure which rule is causing it
> >
> > Mar 15 23:06:04 reaper snort: ICMP Echo Request (Undefined Code!):
> > them.x.x.x -> me.x.x.x
> > Mar 15 23:06:05 reaper snort: ICMP Echo Reply: me.x.x.x -> them.x.x.x
> > but id really like to shut it off because its filling my /var/log/snort
> > pretty quick!!!
> >
> >
> > Andrew
> > \\\\\/////
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users





More information about the Snort-users mailing list