[Snort-users] Part of traffic matching wrong rule

Andrew R. Baker andrewb at ...950...
Tue Jun 24 13:20:05 EDT 2003


Juergen Anthamatten wrote:
> I have the strange behaviour in snort that part of the traffic is matching
> the wrong rule.
> 
[snip]
> 
> Is this a missconfiguration, or ??? 
> TIA for any hints.....

There were a few bugs in the released version of Snort 2.0 with regards 
to rule ordering.  These should all be fixed in the CVS version.  Can 
you try upgrading and seeing if these alerts go away?

-A






More information about the Snort-users mailing list