rules & priority

["seb ." <djorje () yahoo fr>]

<poor english>

Hi,

is there any mean to specify in wich order the rules
are applied to the traffic ?

explanations:
for learning purposes, we set up a server with
snort(all rules) running on.
but when we test it with some fake attacks(with
sneeze), the rules matched are not thoose we were
expected.

example:
pop2 exploit triggers nmap scan

</poor english>

-- 
"Peace cannot be kept by force.
  It can only be achieved by understanding." (Albert
Einstein)


___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Courrier : http://courrier.yahoo.fr

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users