[Snort-users] pass rules

Alberto Gonzalez ag-snort at ...7149...
Wed Oct 23 08:23:05 EDT 2002

http://www.snort.org/docs/writing_rules/ < -- that is basically the 
"Snort Users Manual" so grab it, you can also grab it via PDF.

Hughes, Andy wrote:

> Hi all
> New to snort.  Have looked high and fairly low for info on pass rules, 
> and other than references to the fact that I should write them and use 
> them, and that I should then use the  -o  argument, I am not finding 
> the info on how to write one nor exactly where to put the rule if I 
> did write one.  Can someone point me in the direction?
> TIA,
> Andy Hughes
> Systems Engineer
> Aquilent, Inc
> (301) 939-1430
> 1100 West Street
> Laurel, MD 20707

The secret to success is to start from scratch and keep on scratching.

More information about the Snort-users mailing list