[Snort-users] pass rules

Hughes, Andy Andy.Hughes at ...7262...
Wed Oct 23 08:27:16 EDT 2002

Thanks for the reply.  Perhaps I read right past it, but I did look there and didn't see the part about how to write pass rules and where to put them.  'Course, I've never been accused of being particularly adept at reading...
I'll try again.


-----Original Message-----
From: Alberto Gonzalez [mailto:ag-snort at ...7149...]
Sent: Wednesday, October 23, 2002 2:22 PM
To: Hughes, Andy
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] pass rules

http://www.snort.org/docs/writing_rules/ < -- that is basically the 
"Snort Users Manual" so grab it, you can also grab it via PDF.

Hughes, Andy wrote:

> Hi all
> New to snort.  Have looked high and fairly low for info on pass rules, 
> and other than references to the fact that I should write them and use 
> them, and that I should then use the  -o  argument, I am not finding 
> the info on how to write one nor exactly where to put the rule if I 
> did write one.  Can someone point me in the direction?
> TIA,
> Andy Hughes
> Systems Engineer
> Aquilent, Inc
> (301) 939-1430
> 1100 West Street
> Laurel, MD 20707

The secret to success is to start from scratch and keep on scratching.

More information about the Snort-users mailing list