Snort mailing list archives
Re: rules & priority
From: Erek Adams <erek () theadamsfamily net>
Date: Mon, 19 Nov 2001 11:11:22 -0800 (PST)
On Mon, 19 Nov 2001, [iso-8859-1] seb . wrote:
<poor english>
Trust me, my French is a _LOT_ worse! ;-)
is there any mean to specify in wich order the rules are applied to the traffic ?
Have a look at the following FAQ question: http://www.snort.org/docs/faq.html#3.13 That's an explanation of how the rule ordering works.
From there you should have a better idea of how/why your unexpected alerts are
being matched. Hope that helps! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- rules & priority seb . (Nov 19)
- Re: rules & priority Erek Adams (Nov 19)
- Re: rules & priority Dragos Ruiu (Nov 19)