[Snort-users] How to turn on first-match-out criteria

Pablo Artuso artusopablo at ...11827...
Mon May 5 11:55:57 EDT 2014


Hi, I'm using Snort 2.9 . I have been searching this for hours and didn't
found the answer (even in the archives of this list). I read that, in
previous versions, it was the default configuration.

How can I configure my Snort in order to accomplish both thing :
         - Alert when a rule match.
         - Finish. I mean, stop matching other rules.


Thank you!
Kind regards,

Pablo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140505/193d1023/attachment.html>


More information about the Snort-users mailing list