On Mon, 15 Oct 2001, Mike Walter wrote:
> Yes you can do a pass rule and then start up snort with a -o option
> so the pass rules will process first.
Yes, this will work. The only thing is it's not quite what I think Patrick
was asking for.