[Snort-users] Changing a Classification

Graham, Robert rgraham at ...8016...
Thu Jan 23 15:24:04 EST 2003

I created a new classification to replace "kickass-porn" with a
classification of just "Porn".  I gave it a description and priority and
changed the classtype to Porn in the signatures and restarted snort.  The
result of this caused some signatures to classify it as "Porn" and some to
classify it as "kick-Ass Porn".  I double checked the classtype and they are
all set to "Porn".  I then deleted the "kickass-Porn" classification,
restarted snort, and now it reports some of the porn alerts as
classification "-" and others as "Porn".  What I'm I doing wrong?

Snort Version: 1.8.6 (Build 105)
OS: Redhat 7.2
Demarc Interface
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030123/58e1fff3/attachment.html>

More information about the Snort-users mailing list