[Snort-users] Disable rules

Matt Kettler mkettler at ...4108...
Mon May 24 10:00:02 EDT 2004


At 11:55 AM 5/24/2004, Jorge Cláudio wrote:
>I have disabled (line started with #) some lines in rule files, but still 
>reciving alerts for some of the rules I have diabled.
>What's can be wrong.

Did you restart snort after disabling the rules?

Is there any chance that you've got duplicates of the same rule? (use grep 
to check)







More information about the Snort-users mailing list