Snort mailing list archives

Re: Pass rules


From: Matt Kettler <mkettler () evi-inc com>
Date: Fri, 21 Feb 2003 15:28:59 -0500

Why are you using 1.9.0 beta6? 1.9.0 official release is newer and has been available since October 3rd.

At 01:31 PM 2/21/2003 -0600, Pete Davis wrote:
** High Priority **

I just upgraded from 1.8.3 to 1.9.0beta6.  I copied the pass rule from
1.8.3 to use with 1.9.x but they don't work anymore.  After reading the
snort site to see if I need to change any of the command line structure
for the rules, it seems the old 1.8.x rules should work with 1.9.x.  Is
that correct?

The command I am using to start snort has the -o in it.  Also, the
snort window says:

Rule application order: ->pass->activation->dynamic->alert->log

I am using windows 2000 with snort 1.9.0beta6-ODBC-MySQL-WIN32 (Build
209).

Thanks for any help.


-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: