[Snort-users] Disablesid not working

Mike Kun mkun at ...6382...
Thu Oct 14 13:19:30 EDT 2010


I'm having an issues where some of the rules in my disablesid file are
not working.
It's not that the contents of the file aren't being read, only that some
signatures continue to fire.

Fir example, I have a list of sids:
1:408,1:384,1:449,1:402,1:483,1:485,1:486,1:401,1:366,1:368,1:384,1:385,1:466

but 1-466 will fire.

I have reran pulledpork and then stopped and restarted barnyard2 and snort.





More information about the Snort-users mailing list