Re: pass rules

[Alberto Gonzalez <ag-snort () cerebro violating us>]

http://www.snort.org/docs/writing_rules/ < -- that is basically the 
"Snort Users Manual" so grab it, you can also grab it via PDF.



Hughes, Andy wrote:

> Hi all
> New to snort.  Have looked high and fairly low for info on pass rules, 
> and other than references to the fact that I should write them and use 
> them, and that I should then use the  -o  argument, I am not finding 
> the info on how to write one nor exactly where to put the rule if I 
> did write one.  Can someone point me in the direction?
>
> TIA,
>
> Andy Hughes
> Systems Engineer
> Aquilent, Inc
> (301) 939-1430
> 1100 West Street
> Laurel, MD 20707

--
The secret to success is to start from scratch and keep on scratching.




-------------------------------------------------------
This sf.net email is sponsored by: Influence the future 
of Java(TM) technology. Join the Java Community 
Process(SM) (JCP(SM)) program now. 
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0002en

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users