[Snort-users] Switching snort from IDS to IPS mode

Ngnr Pu ngnrpu at gmail.com
Sun Feb 11 06:34:27 EST 2018


is there any option for snort signature writing using if condition ?

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=oa-2368-b>
Virus-free.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=oa-2368-b>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

On Sat, Feb 3, 2018 at 4:56 AM, bobby via Snort-users <
snort-users at lists.snort.org> wrote:

> Hello,
>
> I would like to switch Snort from IDS to IPS mode.  Is this done only by
> modifying the rules, from alert, to drop status, or is there an easier,
> better way of accomplishing this?
>
> Thank you.
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.snort.org
> Go to this URL to change user options or unsubscribe:
> https://lists.snort.org/mailman/listinfo/snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
> Please follow these rules: https://snort.org/faq/what-is-
> the-mailing-list-etiquette
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180211/0f81401d/attachment.html>


More information about the Snort-users mailing list