[Snort-users] problem with suppress...
Graeme.Rider at ...12106...
Thu Aug 5 04:10:08 EDT 2004
sorry about the delay but l am on a weeks holiday at the moment...
yes, l am using the -o flag...now the funny thing that l have found is that
l have several sensors running the same version of snort but only one, at
the moment, that does not repsonf to suppress commands...
it responds to pass commands (have not tried threshold,etc)...
From: Tobias Rice [mailto:rice at ...7669...]
Sent: Thursday, 15 July 2004 12:02 AM
To: Graeme.Rider at ...12106...
Cc: snort-users at lists.sourceforge.net
Subject: [Snort-users] problem with suppress...
-----BEGIN PGP SIGNED MESSAGE-----
Are you using the "-o" flag to change the rule testing order to
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
This email and any attachments may contain privileged and confidential information and are intended for the named addressee only. If you have received this e-mail in error, please notify the sender and delete this e-mail immediately. Any confidentiality, privilege or copyright is not waived or lost because this e-mail has been sent to you in error. It is your responsibility to check this e-mail and any attachments for viruses. No warranty is made that this material is free from computer virus or any other defect or error. Any loss/damage incurred by using this material is not the sender's responsibility. The sender's entire liability will be limited to resupplying the material.
More information about the Snort-users