[Snort-users] Which rule!
rew at ...1587...
Thu Mar 15 18:39:37 EST 2001
At 16:23 15/03/2001 -0700, you wrote:
>Check rule #23 in the current info.rules file. (from todays update)
Thanks for the quick reply, didnt realise how much stull was in info.rules!!
still getting used to the new rules files layout :-)
>----- Original Message -----
>From: "Andrew Betson" <rew at ...1587...>
>To: <snort-users at lists.sourceforge.net>
>Sent: Thursday, March 15, 2001 4:14 PM
>Subject: [Snort-users] Which rule!
> > i get this logged a couple of times a minute from different ip addresses,
> > im not sure which rule is causing it
> > Mar 15 23:06:04 reaper snort: ICMP Echo Request (Undefined Code!):
> > them.x.x.x -> me.x.x.x
> > Mar 15 23:06:05 reaper snort: ICMP Echo Reply: me.x.x.x -> them.x.x.x
> > but id really like to shut it off because its filling my /var/log/snort
> > pretty quick!!!
> > Andrew
> > \\\\\/////
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
More information about the Snort-users