[Snort-users] Is there any way to add the rule action in the alert?

Avery Rozar Avery.Rozar at ...16118...
Mon Jul 15 16:25:10 EDT 2013

I see, thank you.

On 7/15/13 4:20 PM, "waldo kitty" <wkitty42 at ...14940...> wrote:

>On 7/15/2013 15:56, Avery Rozar wrote:
>> I would like to have the term "drop" or "dropped" in the Alert, is this
>in the alert message text? yes, it is possible but you have to edit all
>rules to put it in the msg:"message text here"; field in the rules...
>NOTE: No off-list assistance is given without prior approval.
>       Please keep mailing list traffic on the list unless
>       private contact is specifically requested and granted.
>See everything from the browser to the database with AppDynamics
>Get end-to-end visibility with application monitoring from AppDynamics
>Isolate bottlenecks and diagnose root cause in seconds.
>Start your free trial of AppDynamics Pro today!
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>Snort-users list archive:
>Please visit http://blog.snort.org to stay current on all the latest
>Snort news!

More information about the Snort-users mailing list