[Snort-users] Rule order activation

Nicÿffffa4 nico33b at ...1855...
Thu Oct 27 01:12:38 EDT 2005


Hi all, 

I wonder to know if it is possible to modify 
the default rule order activation.

What do I want is to use specific rule type before the
pass ruletype.

I have for example : 

ruletype logtype1{
        type ...
        ...
}

and I want the following rule order activation : 

->activation->dynamic->alert->log->logtype1->pass

is it possible ? 

Thans by advanced, 

Nico.



	

	
		
__________________________________________________________
Lèche-vitrine ou lèche-écran ?
magasinage.yahoo.ca




More information about the Snort-users mailing list