[Snort-users] rules & priority

seb . djorje at ...1855...
Mon Nov 19 10:59:02 EST 2001


<poor english>

Hi,

is there any mean to specify in wich order the rules
are applied to the traffic ?

explanations:
for learning purposes, we set up a server with
snort(all rules) running on.
but when we test it with some fake attacks(with
sneeze), the rules matched are not thoose we were
expected.

example:
pop2 exploit triggers nmap scan

</poor english>

-- 
"Peace cannot be kept by force.
  It can only be achieved by understanding." (Albert
Einstein)


___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Courrier : http://courrier.yahoo.fr




More information about the Snort-users mailing list