[Snort-users] Is there any way to add the rule action in the alert?

Avery Rozar Avery.Rozar at ...16118...
Mon Jul 15 16:25:10 EDT 2013


I see, thank you.

On 7/15/13 4:20 PM, "waldo kitty" <wkitty42 at ...14940...> wrote:

>On 7/15/2013 15:56, Avery Rozar wrote:
>> I would like to have the term "drop" or "dropped" in the Alert, is this
>>possible?
>
>in the alert message text? yes, it is possible but you have to edit all
>enabled 
>rules to put it in the msg:"message text here"; field in the rules...
>
>-- 
>NOTE: No off-list assistance is given without prior approval.
>       Please keep mailing list traffic on the list unless
>       private contact is specifically requested and granted.
>
>--------------------------------------------------------------------------
>----
>See everything from the browser to the database with AppDynamics
>Get end-to-end visibility with application monitoring from AppDynamics
>Isolate bottlenecks and diagnose root cause in seconds.
>Start your free trial of AppDynamics Pro today!
>http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktr
>k
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
>Please visit http://blog.snort.org to stay current on all the latest
>Snort news!





More information about the Snort-users mailing list