[Snort-users] problem with suppress...

Graeme Rider Graeme.Rider at ...12106...
Thu Aug 5 04:10:08 EDT 2004


Tobias,
	sorry about the delay but l am on a weeks holiday at the moment...
yes, l am using the -o flag...now the funny thing that l have found is that
l have several sensors running the same version of snort but only one, at
the moment, that does not repsonf to suppress commands...
it responds to pass commands (have not tried threshold,etc)...
regards
graeme

-----Original Message-----
From: Tobias Rice [mailto:rice at ...7669...]
Sent: Thursday, 15 July 2004 12:02 AM
To: Graeme.Rider at ...12106...
Cc: snort-users at lists.sourceforge.net
Subject: [Snort-users] problem with suppress...


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Are you using the "-o" flag to change the rule testing order to
Pass|Alert|Log?

Tobias
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFA9TzJRJX8S0T0CkURAgydAKCqv7UOaJ4eL4JOIPIW3jnGpPcTyQCfVWq6
yHLh601GO7lWufmFYuCRXIE=
=8xco
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

This email and any attachments may contain privileged and confidential information and are intended for the named addressee only. If you have received this e-mail in error, please notify the sender and delete this e-mail immediately. Any confidentiality, privilege or copyright is not waived or lost because this e-mail has been sent to you in error. It is your responsibility to check this e-mail and any attachments for viruses.  No warranty is made that this material is free from computer virus or any other defect or error.  Any loss/damage incurred by using this material is not the sender's responsibility.  The sender's entire liability will be limited to resupplying the material.




More information about the Snort-users mailing list