Snort mailing list archives
Rule Order
From: "Ron Shuck" <rshuck () Buchanan com>
Date: Thu, 1 May 2003 14:33:20 -0500
Hi, Has anyone else changed the rule order under 2.0? When I upgraded to 2.0, I started having problems with ICMP alerts when my rule order was set to 'pass alert log'. Actually, any setting other than default caused problems. ICMP alerts happen, they just skip the normal rule and trigger the "Undefined Code" rule. TIA, Ron Shuck, CISSP, GCIA - Managing Consultant Buchanan Associates - A Technology Company in the People Business http://www.buchanan.com http://www.isc2.org http://www.giac.org ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Rule Order Ron Shuck (May 01)
- Re: Rule Order Allan Dover (May 02)
- <Possible follow-ups>
- RE: Rule Order Ron Shuck (May 02)